As Senior Security Engineer at LeanIX you are responsible for securing LeanIX’s corporate network, network infrastructure, client endpoints, services and data. As part of our Information Security Team you will help in securing the LeanIX SaaS Platform and its underlying PaaS / IaaS service (to the extent managed by LeanIX). Within the Information Security Team, you will continuously build and improve the security of LeanIX for our leading international enterprise costumers as data protection is a key to our success by using a modern tech stack.

Senior Security Engineer (f/m/d)Hybrid position (80% remote 20% office) based in Bonn/Munich, Ljubljana or Amsterdam. We are only accepting applications from candidates based in Germany, Slovenia or Netherlands.
WHAT IS WAITING FOR YOU?

• Providing subject matter expertise on Web application security, API, Single Sign On (including authentication and authorization), systems and network architecture security
• Providing security expertise and guidance on a constant stream of new projects and technologies
• Performing security assessments of core corporate and cloud infrastructure
• Building and/or implementing tools that aid in enhancing the security posture of LeanIX SaaS Platform
• Triaging of alerts / issues reported by SCA, SAST and other security monitoring tools
• Providing guidance on hardening LeanIX clients, servers and networks against exploitation
• Organizing and executing penetration tests and VA scans internally and externally including tracking findings to closure
• Identifying issues, proposing solutions, implementing solutions with the help of Product Team
• Organise and lead security trainings for our developers

WHAT ARE WE LOOKING FOR?

• 6-8 years of true industry experience within application and network Security
• Relevant experience with application security, secure code review, network security and mobile
• Relevant experience with penetration testing methodology for cloud environment
• Experience with and knowledgeable of different security frameworks like OWASP Top 10, SANS CWE Top 25
• Experience with cloud security (e.g. Azure, AWS, GCP)
• Skilled with programming languages: Backend (Java) and frontend (JavaScript)
• Some experience in an agile environment 
• Relevant Security Certifications are a plus e.g. CREST CRT, CREST CPSA, OSCP, CEH, CHFI, etc.
• A drive to be a leader within the Application and Infrastructure Security domain