Senior Security Engineer (80 - 100%)
Role details
Job location
Tech stack
Job description
Join CISTEC as a Senior Security Engineer in healthcare tech! Be part of a dynamic team committed to improving patient care.
Tasks
- Lead our Security Champions and promote knowledge sharing.
- Establish 'Shift-Left-Security' in the software development lifecycle.
- Act as a key contact for application security and agile teams., * Professional leadership of our Security Champions, promotion of knowledge exchange, and responsible for building our Security Champion guild considering our internal security policies, best practices, and secure coding guidelines.
- Establishment of "Shift-Left-Security" and early anchoring of security principles throughout the entire software development cycle.
- Central contact person for all aspects of application security and advising our agile development teams on implementing secure software.
- Participation in the development of modern web apps (mobile, widescreen, desktop) in the extensive ecosystem of our clinical information system KISIM.
- Leading threat modelings as well as supporting secure code reviews and coordinating external penetration tests.
- Evaluation, implementation, and optimization of our security tools (SAST, DAST, SCA) with integration into our CI/CD pipelines.
In this role, you work closely with the CISO, product owners, software architects, DevOps engineers, and developers to effectively implement security requirements.
Requirements
- Degree in Computer Science or related field; strong software engineering experience.
- Proficient with React, TypeScript, Node.js, and security standards.
- Excellent communication skills and mentoring experience., * Completed studies in computer science, business informatics, or a similar education.
- Several years of practical experience as a software engineer with tech stack React, TypeScript, Node.js, GraphQL, GitLab CI, Argo CD, Kubernetes, and Postgres.
- Solid experience in implementing IT security measures in software projects as well as confident handling of common security standards, attack scenarios, and tools (OWASP Top 10, SAST, DAST, SCA).
- Knowledge of SaMD and ISO-81001-5-1 is an advantage.
- You enjoy sharing your knowledge, coaching others, and independently driving an initiative forward. Initial experience in mentoring or leading a community of practice is a big plus.
- You can explain complex technical issues clearly and convince at all levels.
- Fluent German skills in spoken and written form.
Benefits & conditions
Meaningful work with impact: You work on exciting projects at the interface of AI and healthcare - in an interdisciplinary team that creates real added value.
Innovative environment: Together we develop pioneering solutions that sustainably improve clinical everyday life - with noticeable impact for health professionals.
Flexible working: Part-time work, flexible working hours, and home office are a matter of course. After the probation period, you can work remotely up to four days a week.
Learning and innovation culture: We actively promote your further education and support you in attending professional conferences and trade fairs. Flat hierarchies and an open, agile team environment create space for personal and professional development.
Attractive benefits: Enjoy 5 weeks of vacation per year. Unpaid leave is possible by arrangement.
Shared experiences: We celebrate successes together - at lunch barbecues, on snow days, or at our team and company events.
