Senior Security Engineer – AppSec (d/f/m)

About This Opportunity

Our talent team is representing a confidential SaaS organization operating in the live entertainment technology sector. This remote position based in Germany offers a rare opportunity to architect and lead application security from the ground up in a high-growth, high-scale environment.

This is a Senior Security Engineer - AppSec role where you'll have significant autonomy to build a state-of-the-art AppSec program. You'll be working with a modern tech stack handling over 1 billion requests monthly, with usage quadrupling year-over-year and over 10 million end users globally.

Responsibilities

• Partner with engineering teams as a trusted advisor to champion security-by-design principles and elevate the overall security posture
• Coordinate and execute threat modeling and advanced security testing across products and underlying infrastructure
• Drive vulnerability management using modern, risk-based principles like EPSS, leveraging AI technologies to accelerate security testing at scale
• Design, implement, and automate security checks and guardrails (SAST, DAST, secret scanning) directly into CI/CD pipelines
• Perform deep-dive code and configuration reviews, advocating for secure coding practices that support a proactive shift-left strategy
• Secure web applications and API infrastructure in a complex multi-tenant, multi-region environment
• Lead offensive and defensive testing initiatives, including red teaming activities
• Harden Kubernetes deployments, GitOps workflows, and cloud-native security architecture

What We're Looking For

Required:

• 5+ years of dedicated Security Engineering experience, ideally within high-growth SaaS, e-commerce, or fintech environments
• Deep understanding of web and API attack vectors and scalable security best practices
• Proven ability to dive deep into complex SaaS application business logic to uncover and verify attack vectors
• Experience running workloads securely in cloud environments (Kubernetes, AWS/GCP/Azure)
• Track record of autonomously driving security initiatives from conception to completion
• Proficiency in at least one programming language for scripting and security tool development
• Bachelor's or Master's degree in Computer Science, Cybersecurity, IT, or related technical field (or equivalent practical experience)
• Authorization to work in Germany

Preferred:

• Experience with PCI DSS compliance requirements
• Background in Red Team or Purple Team operations and advanced penetration testing
• Hands-on experience with Terraform for infrastructure-as-code security
• Familiarity with GCP, Golang, and TypeScript
• Experience automating GRC evidence collection

How We Work With You

Candidates apply directly through Get A Job.ai. Our recruiting team will screen qualified applicants and coordinate interviews. We then submit strong candidates to our client for their consideration. Please do not attempt to contact the client directly, as all communication should flow through our team to ensure a smooth process.

Pay

Compensation details will be discussed during the screening process based on experience and qualifications.

Equal Employment Opportunity: Get A Job.ai is committed to inclusive hiring practices. We welcome applications from candidates of all backgrounds and work to ensure fair consideration throughout our recruitment process.