Senior Product Security Engineer

Summary

Join Apaleo, a promising international hospitality start-up in Munich, as a Senior Product Security Engineer. You'll build and implement security controls for cloud resources, write secure and maintainable code, conduct security reviews and threat modeling, and develop security tools and processes. You'll also participate in security operations, respond to incidents, and mentor team members. This role requires extensive experience in application security, cloud security, and incident response, along with strong communication skills. Apaleo offers a competitive compensation package, flexible work arrangements, and a diverse and inclusive work environment.

Requirements

• BS in Computer Science, Information Security, or equivalent professional experience
• More than 5 years of experience in areas such as application security, offensive security, systems security, and/or incident response
• Strong debugging and problem-solving skills
• A clear understanding of the balance between security and user friction
• Understanding of security vulnerabilities, threat modelling, attacker exploit techniques, and methods for remediation
• Understanding of best practices in security engineering, including secure development, cryptography, security operations, systems security, policy, and incident response
• Excellent English written and verbal communication skills and the ability to adapt messaging to executive, technical, and non-technical audiences
• Communicated to stakeholders, providing advice on vulnerability remediation and risk mitigation
• Mentored engineering team members on the application of security best practices during the conceptualization and implementation of new Apaleo features
• Knowledge of at least one programming language and scripting skills (C#/.Net)
• Experience with the implementation of security tools and practices in modern, cloud-native environments for customer-facing web-based applications

Responsibilities

• Implement security control that prevents misconfigurations of cloud resources, and security observability of best practices about cloud infrastructure
• Write efficient, maintainable and testable code
• Leverage your knowledge to conduct reviews, threat modelling and code reviews on applications and relevant supporting services and tools
• Implement security services, automation, and monitoring tools to protect Apaleo services: ranging from CI pipelines and ending with security checks in production environments to production microservices that enforce security
• Create relevant documentation and metrics for your stakeholders and business leaders, and deliver these in a clear, concise manner
• Develop innovative and scalable tools, solutions, and processes to detect security threats and threats to data security
• Participate in security operations, responding to security incidents and providing security expertise for Apaleo customers and internal stakeholders

Preferred Qualifications

• Proven track record of experience with AWS and container orchestration. Experience with ECS would be a plus
• Experience with any paradigm of Infrastructure-as-Code (IaC), preferably Terraform

Benefits

• A key role in one of the most promising international start-ups in the hospitality industry, located in the heart of Munich
• A diverse team of motivated and international experts from various disciplines and backgrounds
• Fair compensation with a transparent peer review and career progression plan
• Flexible and free choice of work location + we support remote work
• Team events: team-events, dinners, meet-ups, Oktoberfest
• 30 vacation days per year
• Free public transportation inside the city of Munich