Security Lead - Application Security & Information Security Management (m/f/d)

Security in the development process · Threat modelling, derivation of security requirements and guidelines for code checks. · Training for developers. · Safety tests during and after development (static and dynamic). · Examination of libraries/components and maintenance of software Bill of Materials. · Continuous vulnerability management: from notification to correction to publication. Product safety architecture · Selection and use of cryptographic methods. · Secure handling of Secrets (e.g. keys, passwords) and key management. · Creation and maintenance of curing guides. · Coordinate external safety tests and track findings until verification. Preparing for security incidents · Emergency plans, exercises and regulated communication with customers and the public. · Responsible disclosure of vulnerabilities (Disclosure Process/VDP). Data protection from the beginning · cooperation with law/data protection; Support for alerts and safety questionnaires. Information security management (in practice) · Development of a lean ISMS (e.g. along ISO/IEC 27001 or with SOC‐2 tests) with a focus on practical and efficient processes. Frame & Resources · Resources: Budget for security tooling, external penetration tests and, if applicable, ISO consulting. · Integration: direct line of report to management; close cooperation with development and support.

· Multiannual experience in application security or security engineering (desktop, mobile or server). · Practice in Secure‐SDLC measures and common security checks as well as automation. · Knowledge of authentication and authorization as well as secure platform key storage (Windows, macOS, Android, iOS). · Risk-based prioritization and clear, address-oriented communication internally and vis-à-vis corporate customers. · Very good German and English in word and writing. Nice to have · Experience with ISO/IEC 27001 and SOC 2 and coordinated disclosure of vulnerabilities. · Experience with CI/CD processes. · Experience with the maintenance of software piece lists.

· Great design playroom or self-responsibility with direct impact. · Short decision-making and a friendly, value-adding team together in the small team. · Modernly equipped workplaces with height-adjustable tables, ergonomic chairs and state-of-the-art hardware, including restroom, billiard room and kitchen with dining area. · Central location in the Darmstadt city centre - directly at the Herrgarten - with excellent transport connections. · Flexible working hours (core working time 10:00–16:00). · 30 days holiday. · Above-average salary - depending on experience and responsibility. .