Senior Security Engineer (d/f/m)

Team: Product & Development

Location: Remote Germany

Commitment: Full time

Workplace Type: remote

As a Senior Security Engineer (d/f/m) your responsibilities will include:

• Architecting our technical security operations while supporting the general growth and maturity of our information security program.
• Driving the implementation of a SIEM, including log ingestion, tuning, and general log/evidence integration across a broad range of product and enterprise technologies.
• Detecting, investigating, and resolving security events and incidents to continuously minimize impact and recovery time.
• Leading the technical IR lifecycle (including our product) as the Incident Commander, conducting forensics and comprehensive post-incident analysis.
• Creating and maintaining comprehensive incident response runbooks and automated response processes to continuously mature the IR program.
• Ideally: Assisting with the broader security posture through code reviews, implementing technical controls, and building checks into our CI/CD pipeline.

What you will need to succeed in this role:

• 5+ years of experience as a product-facing SOC Analyst, Incident Responder, or Security Engineer (or equivalent) in a SaaS/E-commerce environment.
• Proven ability to act as Incident Commander in the technical IR lifecycle—preferably for a SaaS/E-commerce product with high uptime and resilience requirements—leading forensics and driving SIEM implementation and tuning.
• A proven track record of taking end-to-end ownership in a fast-paced environment, building processes from the ground up, and constantly adjusting to technological and organizational change.
• Proficiency in any programming language for scripting, security tooling development, and automating GRC evidence collection.
• Preferred: Proficiency in Terraform for securing infrastructure, combined with hands-on experience in integrating security testing (you will need to be able to independently perform investigations across the entire tech stack).
• Nice to have: Experience with preventing “rent-seeking” attacks like cybersquatting, sneaker bots, scalping, or grinch bots.
• Nice to have: Experience in executing Red Team operations and/or penetration testing, with the ability to effectively collaborate with development teams to drive the remediation of software vulnerabilities.
• A Bachelor's or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a closely related technical field.