Cyber Security Software Engineering Expert - Community & Governance (m/f/d)

Introduction text

Schwarz Digits creates the technological foundation for digital sovereignty in Europe. As the IT and digital division of the Schwarz Group, we develop and manage the IT infrastructures for the retail divisions Lidl and Kaufland, as well as Schwarz Production and PreZero. At the same time, we operate as an independent provider in the external market to support companies across Europe in their digital transformation. We bundle our core services in the areas of Cloud, Cyber Security, Data & AI, Communication, and Workspace.

Join us and contribute to digital sovereignty in Europe. With us, you will work at the intersection of agility and security: You will benefit from fast decision-making processes, enjoy genuine creative freedom in your projects, and be able to build upon the stable foundation of the Schwarz Group.

Your Tasks

• You manage and scale our internal Security Champions Community and program through regular meetings, gamification (leaderboards), and targeted upskilling events.

• You lead an active council of Security Champions.

• You act as the primary mentor for our embedded Security Champions, guiding them in their daily work, like for example vulnerability triage, enforcing our ISMS Policies within the products etc.

• You translate complex security policies into developer-friendly processes without creating bottlenecks in agile workflows.

• You validate the achievements of local teams and maintain our "Paved Road" knowledge base for secure code implementations.

Your Profile

• You have several years of professional experience alongside a solid understanding of software engineering and agile development methods (Scrum/Kanban).

• You ideally bring experience in building tech communities, driving Security Governance, or working with maturity models (e.g., OWASP SAMM).

• You have a solid grasp of Secure SDLC principles, Threat Modeling, and practical AppSec tooling.

• You possess a pragmatic "security-as-an-enabler" mindset and have hands-on experience integrating AppSec tools (SAST, DAST, SCA) into modern CI/CD pipelines without slowing down release cycles.

• You are a strong community builder and culture driver with outstanding coaching skills, and you communicate fluently in German and English.