Platform Security Lead (m/f/d)

We are seeking a highly skilled and experienced Platform Security Lead (PSL) to join our team and strengthen the security posture of our platforms. As the Platform Security Lead within the CISO Department, you will be responsible for driving security by design in the IT & Development teams, assessing potential security threats or breaches, setting awareness on security aspects to consider bringing up, and driving security requirements in cooperation with our CISO Teams.

To be a successful PSL, you should have excellent attention to details, as well as strong strategic planning skills. Outstanding PSLs display excellent communication, interpersonal, and top-notch technical skills.

Responsibilities and Tasks

• Driving security by design in the IT & development teams
• Performing risk assessments to eliminate as many potential risks as possible, including: performing designs reviews, producing security requirements, performing gap analysis, validating security controls implementation, supporting pen-tests activities, supporting IT teams with advice on vulnerabilities' remediation activities, articulating existing risks to support risk acceptance processes, and issuing formal Risk Opinion reports
• Driving the conception of DevSecOps within our DevOps teams
• Being the First Point of Contact for almost all security-related topics
• Formally assessing information security risks related to solution/business projects, determining the potential impact of those risks, and conducting follow-up throughout the project lifecycle on any necessary remediation efforts
• Working hand-in-hand with IT teams (developers, architects, product owners, business) to serve the platform's requirements and CISO requirements
• Developing specialized knowledge of and key relationships with the platform, ensuring that security is embedded in the platform and that its security needs are being met
• Collaborating with other team members to identify opportunities for implementing common security solutions
• Supporting our CISO Risk & Compliance team and participating in the creation, review, and update of information security policies
• Remaining up to date with the latest security systems, tools, trends, and technology

Requirements and Qualifications

You are bursting with the ambition to keep up with us. Specifically for this vacancy as a Platform Security Lead for the CISO department, you are skilled at communication, presentation, and stakeholder management. You supplement these skills with:

• Master's or Bachelor's degree or equivalent technical training in Information Technology, Information Systems Security, Cybersecurity, or related field
• Minimum 4 years of relevant IT and Information Security experience and the ability to act independently with minimal supervision
• Experience with security architectures such as cloud, mobile, enterprise, web, and app security architecture
• Proven experience with threat modelling frameworks: MITRE ATT&CK, STRIDE, PASTA
• Understanding core concepts of: ISO 27001, ISO 27017, NIST, NTSC, OWASP, CIS, CVSS
• Experience with security tests to combat code execution, SQL injection, and cross-site scripting
• Experience with security in cloud computing and microservices architecture
• Familiarity with security-related legal and regulatory requirements
• Demonstrated specialized knowledge in web application security and mobile application security, including data protection methods
• Excellent communication skills and the ability to translate technical jargon for non-technical stakeholders

German language expectations: We expect all international candidates to be willing to learn at least the basics of the German language in case they are accepted for the position.

What we offer

• Dynamic and modern working atmosphere in a newly renovated, modern office in the heart of Hamburg's city center
• At least 28 days of vacation, flextime, capital-forming benefits, hybrid work model
• Subsidy for public transportation
• Bike leasing for all positions
• Restaurant and coffee bar
• Health and company sports programs (e.g., yoga, sailing, fitness courses, and much more)
• Corporate volunteering cooperation with purpozed.org

Save time with your application and send us only your CV for now. You can easily apply online by using our application tool.