Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Drive product security improvements across the SSDLC and support compliance efforts. Perform threat modeling, security reviews, and security architecture assessments. Support vulnerability management and remediation of product and platform security issues. Help implement and improve security controls in areas such as application security, cloud security, CI/CD, containers, secrets handling, and infrastructure-as-code. Act as a trusted advisor to Engineering and Product, enabling secure-by-design decisions without becoming a delivery bottleneck. Establish metrics that demonstrate security velocity and customer trust. Maintain cyber security controls and operations security. Develop and maintain scripting/automation for security controls. Monitor and analyze security events and incidents, responding promptly and appropriately to mitigate threats and minimize impact. Advise engineers regarding concepts and implementation of security requirements. Support technical due-diligence to ensure compliance with internal and external security requirements. Contribute to internal and external audits, risk assessments and threat modeling workshops. Contribute to security awareness and practical guidance for product and engineering teams. Help maintain relevant documentation in tools like GitHub, Jira, Confluence and our security compliance platform.

Responsibilities

Drive product security improvements across the SSDLC and support compliance efforts
Perform threat modeling, security reviews, and security architecture assessments
Support vulnerability management and remediation of product and platform security issues
Help implement and improve security controls in areas such as application security, cloud security, CI/CD, containers, secrets handling, and infrastructure-as-code
Act as a trusted advisor to Engineering and Product, enabling secure-by-design decisions without becoming a delivery bottleneck
Establish metrics that demonstrate security velocity and customer trust
Maintaining cyber security controls and operations security
Develop and maintain scripting/automation for security controls
Monitor and analyze security events and incidents, responding promptly and appropriately to mitigate threats and minimize impact
Advise our engineers regarding concepts and implementation of security requirements
Support technical due-diligence to ensure compliance with our internal and external security requirements
Contribute to internal and external audits, risk assessments and threat modeling workshops
Contribute to security awareness and practical guidance for product and engineering teams
Help maintain relevant documentation in tools like GitHub, Jira, Confluence and our security compliance platform

Requirements

Work experience in application security, product security, or secure software development
Proven expertise in threat modeling, secure architecture design and cryptographic protocols
In-depth knowledge and expertise in Platform Security practices and methodologies, with hands-on experience implementing security in a DevOps environment
Hands-on experience with secure software development, threat modeling, security reviews, and vulnerability management
Very good understanding of modern environments such as web, backend, mobile, APIs, cloud, containers, and CI/CD
Hands on experience supporting and training developers on secure coding practices and application security best practices
Ability to work pragmatically with engineering teams and explain security risks in a clear, actionable way
Excellent communication skills, both written and verbal, with the ability to effectively convey complex security concepts to technical and non-technical stakeholders
Strong communication skills and a collaborative, enabling mindset
Basic understanding of information security frameworks, standards, and regulations (e.g., ISO 27001, SOC2, CIS, NIST, GDPR)
Ideally experience with telecommunications or messaging security
minimum 5+ years in Software Security
English C1, German is a plus
Willing to subject yourself to the S2 security screening (Sicherheitsüberprüfung) of the German Government (Security Screening Act (SÜG))

Skills

Application Security
Product Security
Secure Software Development
Threat Modeling
Secure Architecture Design
Cryptographic Protocols
Platform Security
DevOps
Secure Software Development
Vulnerability Management
Web Security
Backend Security
Mobile Security
API Security
Cloud Security
Container Security
CI/CD Security
Secure Coding Practices
Communication Skills
Information Security Frameworks
ISO 27001
SOC2
CIS
NIST
GDPR
Telecommunications Security
Messaging Security
Scripting
Automation

Location

Remote
Berlin

Work Type

Permanent
Full-time

Experience Level

Senior

Benefits

Yearly education budget of 1000 EUR
Urban Sports Club subscription
Work from a beautiful office in the heart of Berlin or choose a mix of working from anywhere vs. spending selected days together in our office
Fresh breakfast in the office, daily fruits, snacks, free soft drinks, and the world's best Barista coffee machine

About the Company

Wire is the leading end-to-end encrypted communication platform revolutionizing secure collaboration for businesses, critical infrastructure, and governments.
We prioritize privacy as a fundamental right, providing organizations across industries with the most secure communication experience possible.
Our cutting-edge encryption technology and robust security measures have made us a trusted partner in the technology, finance, healthcare, and government sectors.
We're building a secure, easy-to-use, and feature-rich communication tool with the latest technologies.
We don't just create software — we're also impacting national and international committees.
Our research and development occur at our Berlin headquarters and other locations in Europe and the USA, where we embrace diversity and adhere to the strictest data protection standards.
We see regulations as a foundation supporting our commitment to secure our customer's communication.

Equal Opportunity

Wire is an equal opportunity employer and does not discriminate on the grounds of gender, civil status, family status, sexual orientation, religion, age, disability, or race.