Security Engineer

Since 2019, the company has run a comparison site for car insurance, mortgages and credit cards. Product reviews happen on Thursdays, with demos of whatever shipped that week.

About the role

Parcelfold HQ is hiring a Security Engineer to work remotely from Germany. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. Remote, open to candidates across Germany. Flexible schedule. We have one team call a day, usually in the morning.

Your responsibilities

• Assess third-party vendors and SaaS integrations for security risk.
• Run threat modelling sessions with engineering teams on new features and architecture changes.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Review code and pull requests for security issues.

Skills and experience

• Ability to explain security issues to engineers without lecturing them.
• Experience with SIEM, EDR or vulnerability management tools.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.

Compensation and benefits

• Company pension scheme.
• Holiday pay.
• Christmas bonus.
• Up to 3 days of home office per week.
• Meal allowance.
• Flexible working hours.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Parcelfold HQ.