Senior Security Engineer

Summary

Join Roadsurfer as a Security Engineer and contribute to the security of our internal IT systems and consumer software applications. You will be part of a growing team, helping to create unique travel experiences for customers worldwide and supporting our teams. This role offers a flexible work environment with a blend of office and remote work options, along with opportunities for professional development and unique company benefits like campervan rentals and job bikes. You will foster a security-first mindset, coordinate security assessments, develop security procedures, and implement strategic security projects. Roadsurfer provides a collaborative and fun work environment with various team events and perks.

Requirements

• Act as an ambassador: Represent and promote a security-first culture, serving as a role model and advocate for best practices at all levels of the organization
• Influence others: Inspire teams by clearly communicating the importance of cybersecurity, fostering collaboration, and driving alignment toward common goals
• Technical writing skills: Be excellent at creating clear and concise documentation, including problem descriptions, success metrics, option evaluations, and actionable recommendations
• Initial experience in IT and application security: Possess fundamental knowledge of security practices such as OWASP and understand key risks and mitigation strategies for applications and IT systems
• Willingness to obtain security certifications: Demonstrate a proactive attitude by wanting to expand your expertise through industry-recognized certifications such as CISSP, CISM, or CEH
• Experience in obtaining company security certifications: Have practical experience in participating in or leading efforts to obtain company-level security certifications, such as ISO 27001, to ensure compliance and improve security standards
• Language skills: Be German-speaking and have fluent English skills

Responsibilities

• Promote a Security-First mindset within internal IT and software development teams by actively raising awareness of potential risks, their impact, and the importance of integrating security into all aspects of their work
• Coordinate, conduct, and review external penetration tests and security audits of internal IT systems and application landscape to ensure thorough assessments and track the implementation of recommended improvements to address identified vulnerabilities
• Develop and implement robust procedures and guidelines to ensure all systems meet regulatory security standards and compliance requirements, creating clear guidelines for team members to proactively fulfill their security responsibilities
• Analyze, recommend, and implement strategic projects to improve our security posture while considering the organization's productivity needs, such as the deployment of AI-powered productivity tools or securing comprehensive cybersecurity insurance
• Stay ahead of the evolving cybersecurity threat landscape by continuously monitoring new technologies and industry trends and actively cultivating relationships with cybersecurity vendors to ensure roadsurfer is always well-equipped to handle emerging challenges
• Work closely with the IT security team and software development teams to implement effective security controls, rigorously track their performance, and conduct post-mortems to ensure continuous improvement
• Proactively ensure roadsurfer maintains customer trust and regulatory compliance, protects sensitive data, and aligns all security measures with the company's commitment to excellence and transparency
• Utilize automation and orchestration to optimize security operations, automate recurring tasks, and coordinate complex workflows to reduce human error and ensure roadsurfer's defenses are always one step ahead of emerging threats

Benefits

• Team spirit & team events: Enjoy a collegial atmosphere with flat hierarchies, lots of fun, and great team spirit, as well as regular team events such as joint sports sessions, pizza & beer evenings, etc
• Flex work & workaction: Be flexible regarding working hours and, thanks to our Flex Work Policy, switch between office days and home office days and work from a European country for one month per year
• Personal development: We support your personal and professional development through an individual growth plan and our in-house academy
• Camper budget: You get an annual free rental for our campers so you can experience the #happyroadsurfing lifestyle yourself
• Job bike: Stay fit with our offer of a job bike
• Discounts: Use our corporate benefits platform, the Travel Industry Card, and Family & Friends discounts
• The place to be: Look forward to a beautiful, bright office with everything your heart desires, such as a table tennis table & kicker. Also, let yourself be pampered by weekly breakfast and lunch offers
• Office dogs: Dogs are welcome in the office