Product Security Engineer (m/w/d) - PROSOZ Herten
Product Security Engineer at PROSOZ Herten, Germany's market leader in municipal (eGovernment) software: embeds Security by Design and the SSDLC, runs threat modeling and risk analyses, drives security tooling, automated checks and vulnerability management, and trains development teams on secure coding and regulations like the CRA.
- Compensation
- Not disclosed
- Location
- Herten, Recklinghausen (Kreis)
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Completed degree in computer science, IT security, or comparable qualification
- 3-5 years of professional experience in software development, software architecture, or IT security
- Experience in secure software development and with modern software architectures, development processes, and DevOps/CI-CD environments
- Knowledge of security standards and best practices (e.g. OWASP, secure coding)
- Experience with security tooling, automated security testing, vulnerability management, and threat modeling
- Understanding of regulatory requirements for software products, e.g. the Cyber Resilience Act (CRA)
- Strong communication and moderation skills; successful collaboration with stakeholders and development teams
- Analytical, structured thinking, high ownership and decision-making ability; enjoys enabling teams and sharing knowledge
Nice to have
- Certifications in IT security or software architecture (e.g. CSSLP, CISSP, iSAQB, GIAC)
Full description
Du verankerst und entwickelst Security by Design sowie unseren Secure Software Development Lifecycle (SSDLC) kontinuierlich weiter. Dabei führst du Threat Modeling und Security-Risikoanalysen durch, etablierst Sicherheitsstandards und automatisierte Security-Checks und unterstützt Entwicklungsteams bei Security Reviews, der Behebung von Schwachstellen und der Einhaltung regulatorischer Anforderungen. Zudem identifizierst und bewertest du Sicherheitsrisiken, entwickelst Vulnerability-Management-…