Cyber Security Engineer - Product Security

About us:

Our website and apps help renters search listings, schedule tours and submit applications. Most of our traffic is mobile, so the iOS and Android apps get as much attention as the website. Founded in 2019, we now have 130 employees.

About the role:

Isar Web is looking for a Cyber Security Engineer - Product Security to join a small, steady team. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. Remote within Germany. The team meets in Hamburg once a quarter, travel covered.

What you'll do:

• Respond to security incidents and lead the technical investigation.
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint.
• Own secrets management, key rotation and KMS policies.
• Review code and pull requests for security issues.

About you:

• Experience with SIEM, EDR or vulnerability management tools.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.
• Ability to explain security issues to engineers without lecturing them.
• Good judgment on risk: knowing what to fix now and what can wait.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)

Pluses:

• Running a bug bounty program.

Pay and benefits:

Salary: €86,000 to €111,000 a year

• Company pension scheme.
• 30 days of annual leave.
• Christmas bonus.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Isar Web GmbH.