Lead Security Engineer (d/m/f) at Scout24

on-site · full-time · Visa sponsorship

Responsibilities:
- Own the technical direction for product, cloud infrastructure, and AI security across teams.
- Design and build reusable security controls, guardrails and security-as-code patterns for developers and platforms.
- Lead threat modelling, security architecture reviews, and secure design sessions for new and existing services.
- Drive CI/CD security, IaC hardening (Terraform), container and runtime protections, and software supply chain controls.
- Mentor engineers, influence roadmaps, and communicate security risks and mitigations to technical and non-technical stakeholders.
- Define and track security metrics and improvements to reduce risk and operational toil.

Requirements:
- Strong hands-on security engineering background with technical leadership experience in medium-to-large organisations.
- Deep knowledge of cloud-native environments (AWS preferred), Kubernetes, IaC (Terraform) and CI/CD pipelines.
- Practical experience with automation and coding (e.g., Python), threat modelling, and security architecture reviews.
- Expertise in identity, data, container, and AI/product security and software supply chain protections.
- Excellent communication skills to explain complex risk, influence engineering choices, and drive cross-functional adoption.
- Familiarity with compliance/standards (e.g., GDPR, ISO 27001) and risk-management practices.