Senior Security Engineer (all genders)

About This Opportunity

We are representing a confidential B2B SaaS organization based in Munich that serves the construction industry. Our client is experiencing rapid growth and needs a hands-on security leader to own their security posture end to end. This is a senior individual contributor role where you'll build and shape security capabilities from the ground up, working directly with engineering teams to embed security practices that scale.

Responsibilities

• Own product and cloud security across the full stack: threat modeling, security architecture reviews, secure-by-default patterns, and CI/CD security tooling including SAST, dependency scanning, container scanning, and secret detection
• Harden AWS infrastructure through IAM architecture, network segmentation, encryption strategies, logging frameworks, and workload security—implementing security-as-code rather than documentation-based approaches
• Build detection and response capabilities from scratch and serve as technical incident commander during security events, leading from detection through containment to post-incident review
• Manage vulnerability disclosure and penetration testing programs, driving remediation directly with product teams
• Support compliance initiatives (ISO 27001, SOC 2, GDPR) with concrete technical controls and evidence, and assist with customer security assessments alongside sales teams
• Shape the security direction as a senior IC, creating guardrails that engineers adopt because they're effective and usable

What We're Looking For

• 7+ years of hands-on security engineering experience, including multiple years owning application and cloud security for a production SaaS platform end to end
• Proven track record building security programs—SDLC security, vulnerability management, detection and response—not just operating existing tooling
• Expert understanding of vulnerability classes and attack techniques beyond OWASP Top 10: ability to threat-model features, identify authorization flaws in code review, and clearly explain exploit paths to engineers
• Deep experience hardening cloud infrastructure at scale (AWS preferred, GCP or Azure acceptable): IAM, network segmentation, container security, and infrastructure-as-code security implementations you designed yourself
• Strong software engineering skills with ability to write production-quality code, build automation from scratch, and contribute meaningfully to architecture discussions with senior engineers
• Demonstrated incident response leadership as technical lead during security incidents
• Sound judgment to make risk-based decisions under uncertainty and influence cross-functional teams without formal authority
• Excellent English; German is a plus
• Willingness to work on-site 3 days per week in Munich (hybrid work model)
• Preferred: experience building security functions in scale-up environments, detection engineering, ISO 27001/SOC 2 certification experience, certifications such as OSCP or CISSP (hands-on skills prioritized over credentials)

How We Work With You

Candidates apply directly through Get A Job.ai. Our recruiting team will conduct an initial screening to understand your background and confirm alignment with the role requirements. For candidates who are a strong match, we will submit your profile to our client for consideration. Please do not attempt to contact the client directly, as all communication and coordination will be managed through our talent team at Get A Job.ai.

Pay

Compensation details will be discussed with qualified candidates during the screening process.

Equal Employment Opportunity: Get A Job.ai is committed to fair and equitable recruiting practices. We evaluate all candidates based on qualifications and merit, and we welcome applicants from diverse backgrounds.