Senior Security Engineer – AppSec

🔥 20 minutes ago

🇩🇪 Germany – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 17%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

vivenu

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

📣 Marketing

📦 Logistics

Consulting • Marketing • Logistics

vivenu is a flexible and advanced ticketing platform designed for ambitious event organizers around the world. It offers a fully customizable, white-label solution that centers around the brand, sales, and business needs of its users. vivenu provides powerful tools such as APIs and SDKs, enabling a seamless integration with third-party software and allowing enterprises to build their own applications. This platform serves a wide array of industries, including sports, music and entertainment, festivals, attractions, and conventions, providing comprehensive solutions for ticketing operations. With vivenu, organizers have the freedom to create personalized customer journeys, utilize in-depth analytics to optimize marketing strategies, and increase revenue through improved on-site conversions.

📋 Description

• Partner with engineering teams to champion security-by-design and improve the overall security posture • Coordinate and execute threat modeling and advanced security tests across the product and underlying infrastructure • Drive risk-based vulnerability triage and remediation using EPSS and AI technologies • Design, implement, and automate SAST, DAST, and secret-scanning checks and guardrails in CI/CD pipelines • Perform code and configuration reviews and advocate secure coding practices • Build, scale, and architect an AppSec program from the ground up • Shape security culture, processes, and tooling across the global engineering organization • Secure the TypeScript monolith, Go services, web application, APIs, Kubernetes, GCP, database services, private compute nodes, VPC peering, and Argo CD GitOps deployment architecture

🎯 Requirements

• 5+ years of dedicated Security Engineering experience • Ideally, experience in a high-growth SaaS, E-commerce, or Fintech environment • Ability to analyze complex SaaS business logic to uncover and verify attack vectors • Deep understanding of web/API attack vectors and scalable security best practices • Ability to run workloads securely in a cloud environment, including k8s and AWS/GCP/Azure • Proven track record of autonomously driving security initiatives from conception to completion • Proficiency in at least one programming language for scripting and security tool development • Bachelor’s or Master’s degree in Computer Science, Cybersecurity, IT, or a related technical field, or equivalent practical experience • Experience navigating PCI DSS script security preferred • Background in Red/Purple Team operations and advanced penetration testing preferred • Hands-on experience with Terraform preferred • Familiarity with GCP, Golang, and TypeScript preferred

🏖️ Benefits

• Mission-critical role with global brands in live entertainment technology • Continuous investment in people, products, and long-term vision • Collaboration with a 160+ person global team across six offices • Diverse, inclusive, merit-driven workplace • Opportunities for daily learning, shared wins, and collective growth • Opportunity to work alongside award-winning technology leaders • Opportunity to shape the future of live entertainment technology and the ticketing industry