Senior Product Security Engineer

Summary

Join Apaleo, a thriving international start-up in the hospitality industry, as a Senior Product Security Engineer! You will play a key role in building a secure and scalable platform, implementing security controls, conducting code reviews, and developing security tools. This position requires extensive experience in application security, cloud security (AWS, ECS), and IaC (preferably Terraform). You will work with a diverse and international team in Munich, with opportunities for remote work and flexible work arrangements. Apaleo offers competitive compensation, benefits, and a supportive work environment.

Requirements

• BS in Computer Science, Information Security, or equivalent professional experience
• More than 5 years of experience in areas such as application security, offensive security, systems security, and/or incident response
• Strong debugging and problem-solving skills
• A clear understanding of the balance between security and user friction
• Understanding of security vulnerabilities, threat modelling, attacker exploit techniques, and methods for remediation
• Understanding of best practices in security engineering, including secure development, cryptography, security operations, systems security, policy, and incident response
• Excellent English written and verbal communication skills and the ability to adapt messaging to executive, technical, and non-technical audiences
• Communicated to stakeholders, providing advice on vulnerability remediation and risk mitigation
• Mentored engineering team members on the application of security best practices during the conceptualization and implementation of new Apaleo features
• Knowledge of at least one programming language and scripting skills (C#/.Net)
• Experience with the implementation of security tools and practices in modern, cloud-native environments for customer-facing web-based applications

Responsibilities

• Implement security control that prevents misconfigurations of cloud resources, and security observability of best practices about cloud infrastructure
• Write efficient, maintainable and testable code
• Leverage your knowledge to conduct reviews, threat modelling and code reviews on applications and relevant supporting services and tools
• Implement security services, automation, and monitoring tools to protect Apaleo services: ranging from CI pipelines and ending with security checks in production environments to production microservices that enforce security
• Create relevant documentation and metrics for your stakeholders and business leaders, and deliver these in a clear, concise manner
• Develop innovative and scalable tools, solutions, and processes to detect security threats and threats to data security
• Participate in security operations, responding to security incidents and providing security expertise for Apaleo customers and internal stakeholders

Preferred Qualifications

• Proven track record of experience with AWS and container orchestration. Experience with ECS would be a plus
• Experience with any paradigm of Infrastructure-as-Code (IaC), preferably Terraform

Benefits

• A key role in one of the most promising international start-ups in the hospitality industry, located in the heart of Munich
• A diverse team of motivated and international experts from various disciplines and backgrounds
• Fair compensation with a transparent peer review and career progression plan
• Flexible and free choice of work location + we support remote work
• Team events: team-events, dinners, meet-ups, Oktoberfest
• 30 vacation days per year
• Free public transportation inside the city of Munich