Software Security Specialist

Ehrhardt + Partner Group
Dortmund, Germany
2 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English, German

Job location

Remote
Dortmund, Germany

Tech stack

API
Software as a Service
Cloud Engineering
Code Review
Continuous Integration
DevOps
JSON
Cloud Services
Swagger
SonarQube
Openapi
Google Cloud Platform
Delivery Pipeline
Software Security
Kubernetes
Information Technology
REST

Job description

With more than 1,600 customers, EPG is one of the internationally leading providers of a comprehensive supply chain execution suite (EPG ONE) and offers WMS, WCS, WFM, TMS, and voice solutions to optimize logistics processes. Logistics consulting, cloud services, managed services, and logistics training at the company's own academy round out EPG's comprehensive portfolio of solutions.

THE POSITION - What it's all about

As a Software Security Specialist (m/f/d), you monitor our systems, analyze security incidents, and coordinate measures to protect against threats. You manage vulnerabilities, optimize security technologies, and promote security awareness throughout the organization. With your expertise and analytical mindset, you strengthen our cyber resilience in line with international standards.

Aufgaben

  • You conduct

Requirements

thorough code reviews and leverage tools like Sonarqube and JFrog XRay to identify and help resolve security vulnerabilities across the product teams.

  • You continuously assess and prioritize potential threats, perform regular system tests for breaches, and maintain an up-to-date incident response plan.
  • You define and drive a strategic security roadmap, including clear goals and key metrics to measure the effectiveness of security initiatives.
  • You promote security awareness across the organization and ensure that secure practices are embedded throughout the DevOps pipeline.
  • You ensure consistent use of advanced data protection methods such as encryption and tokenization, and stay current on trends through active industry engagement.

    • Profil

    • You have completed a degree in Computer Science, Software Security, or possess a comparable qualification together with relevant professional experience.
    • You have proven experience with SOC 2 Type II and familiarity with related standards (SSAE 18 / ISAE 3405) and can implement and maintain controls for compliance in a SaaS environment.
    • You have hands-on expertise securing cloud-native, highly scalable Kubernetes environments (e.g., Google Cloud / GKE) and can harden infrastructure and DevOps/CI pipelines for production SaaS.
    • It is an advantage, if you have strong API and interface security skills (REST APIs, JSON, OpenAPI/Swagger) and can design and review authentication, authorization, and monitoring for cloud-based SaaS APIs.
    • In addition to the German language, you are sufficient in English, written and spoken.

    Wir bieten

    Wir glauben daran, dass Arbeit Spaß machen und zum Leben passen darf. Und deshalb gibt es, neben unserem bunten und talentierten Team, den besten Kunden und den unterschiedlichsten Projekten und Produkten noch folgendes dazu:

    • Onboarding zum Ankommen. Onboardingplan vorab, damit Sie wissen, was auf Sie zukommt. Onboardingtag, um uns besser kennenzulernen. Und die Onboardingphase im Fachbereich; so gestaltet, dass Sie bestmöglich ankommen, verstehen und loslegen können.
    • Aufgaben zum Weiterkommen. Dinge bewegen, ab Tag 1. Das heißt bei uns: Verantwortung geben und bekommen. Ideen nicht nur äußern können, sondern umsetzen dürfen. Und ein Personalentwicklungskonzept, das individuell passt - egal, ob Richtung Führungskraft oder Fachexperte.
    • Arbeitszeit und -ort? Flexibel. Unser Gleitzeitmodell bietet die Flexibilität, die zu Ihrer Arbeit und Ihrem Leben passt. Dazu gehört natürlich auch die Möglichkeit, aus dem Homeoffice heraus zu arbeiten.
    • Miteinander und Kultur? Auf Augenhöhe. Offenes Feedback. Regelmäßige Updates durch unsere Geschäftsführung. Lösungsorientiertes An-einem-Strang-Ziehen. Und natürlich auch Get-together-Events wie das

    Apply for this position