Product Security Lead

Job not on LinkedIn

🔥 37 minutes ago

🇩🇪 Germany – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 79 days.
• No salary listed.

Apply Now

Find Similar Remote Jobs

Implico Group

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 1983

📦 Logistics

🏥 Healthcare

🏭 Manufacturing

Logistics • Healthcare • Manufacturing

Implico Group is a leading provider of solutions for business process digitalization specifically tailored for the supply chain of energy and natural resources. With over 40 years of experience, Implico focuses on automating and optimizing logistics and distribution processes, particularly in the downstream energy sector. The company's offerings include SAP S/4HANA solutions that enable efficient integration, cloud migration, and the use of AI to enhance decision-making and operational efficiency. Through comprehensive consulting and a robust technological foundation, Implico helps clients navigate the challenges of the energy market, embracing innovation and sustainability.

📋 Description

• Take functional ownership of security and compliance within Product & Engineering • Continuously develop security and compliance standards, processes, technical controls, and guardrails • Embed Security by Design, SSDLC, and DevSecOps into development processes • Implement and manage automated security testing, dependency and container scanning, and secrets management • Translate PCI DSS and other regulatory or contractual requirements into technical measures, engineering processes, and release criteria • Define security standards for Microsoft Azure, AWS, SAP BTP, CAP, Kyma/Kubernetes, APIs, and integration architectures • Manage threat modeling, security architecture reviews, vulnerability management, and penetration testing • Develop security guardrails for Generative AI, LLM integrations, and AI agents • Support security assessments, audits, and certifications • Collaborate with Product, Engineering, Enterprise Architecture, Cloud/DevOps, and Corporate Information Security

🎯 Requirements

• Several years of practical experience in Product Security, Application Security, Cloud Security, Security Architecture, or DevSecOps • Strong technical understanding of modern software architectures and development environments • Experience with APIs, microservices, containers, Kubernetes, and CI/CD • Practical experience with threat modeling, secure coding, security testing, vulnerability management, and software supply chain security • Good knowledge of PCI DSS as well as OWASP/OWASP ASVS, NIST, or ISO 27001 • Experience translating compliance requirements into technical controls and robust audit evidence • Experience with Microsoft Azure and/or AWS • Knowledge of SAP BTP, CAP, or Kyma is a plus • Understanding of security risks and protective measures related to Generative AI, LLMs, and agentic systems • Ability to pragmatically align technical and regulatory requirements and implement them with diverse stakeholders

🏖️ Benefits

• Support for mobile and flexible working • Option to work temporarily from abroad by arrangement • Working time account • Support from an engaged works council • 30 days of annual leave • Transparent career system • Individual training and development opportunities • Active and sustainable support for continuing education and professional development • JobRad program for leasing a bicycle or e-bike, including multiple bicycles • WellPass access to fitness, sports, wellness, and health services throughout Germany • Regular team and company events • International working environment

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume