Security and Compliance Engineer

Our partner is a company with more than 30 years of experience in developing custom software applications, they have become trusted IT partners in a variety of industries, such as telecommunications, finance, shipping and logistics. Innovative project delivery models and a full stack of different technologies allow us to deliver ROI driven software solutions for large, SMEs and startups. The company provides its clients with a full software development cycle service, from audit, business needs analysis, solution architecture to programming and maintenance. Quality, speed and functionality this is how they help its customers to grow their business.
Their team has several international certificates such as CEH (Certified Ethical Hacker), CBAP (Certified Business Analysis Professional), ISTQB (International Software Testing Qualifications Board), Microsoft Gold Certified Partner. ISO 9001 certification underpins the quality of our services and ISO 27001 ensures information security.

Role
Our client is seeking a skilled Security & Compliance Engineer to join a product line that streamlines developer workflows by reducing overhead and automating tasks, enabling developers to focus on business logic. This role focuses on securing software assets and ensuring regulatory compliance.

• Proven experience in security engineering with expertise in AquaSec, Sonar, and similar tools.
• Strong passion for security and improving DevOps processes.
• Excellent organizational, interpersonal, and communication skills.
• Advanced level In English, German preferable.

Responsibilities

• Design, implement, and maintain security solutions to protect the integrity, confidentiality, and availability of systems and data.
• Provide security tools (e.g., AquaSec, Sonar) to developers in a self-service fashion through the DevOps Portal.

• Document common security tasks and procedures for both internal teams and external customers.
• Collaborate with other teams to ensure security best practices are followed throughout the development lifecycle.
• Conduct regular security audits and static code analysis to identify and mitigate potential vulnerabilities.