Senior Security Engineer (m/f/d)

Join Wire, the leading end-to-end encrypted communication platform revolutionizing secure collaboration for businesses, critical infrastructure, and governments. We prioritize privacy as a fundamental right, providing organizations across industries with the most secure communication experience possible. Our cutting-edge encryption technology and robust security measures have made us a trusted partner in the technology, finance, healthcare, and government sectors. If you're driven by the mission to redefine secure communication and want to be part of an innovative and dynamic team, join us at Wire. Together, we'll build a world where privacy and security are the foundation of modern communication.

Be ready to play an essential role by joining our Information Security Team. You will become a pioneer in transforming how organisations and governments communicate securely. You will work closely with the Director of Information Security and interact with the engineering, product, and other teams regularly. Your areas of work are:

Product Security

• You review security- or privacy-critical changes and implement or propose solutions to potential issues
• You help to maintain security documentation of the product with focus on product certifications
• You communicate with internal and external stakeholders regarding product security topics
• You support new feature development from a security point of view to identify possible security or privacy pitfalls early in the process
• You contribute to internal security audits, risk assessments and threat modelling workshops
• You conduct security awareness trainings regarding your field of responsibility

Platform  Security

• You are responsible for our Platform Security controls
• You support technical due diligence to ensure compliance with information security and data protection requirements 
• You oversee the incident management process and team members involved in resolving the incident
• You help to maintain documentation of security- and privacy-related processes
• You support Wire’s identity and access management
• You drive the implementation and maintenance of SecOps measures for our Platform

Essential requirements

• You have a proficient understanding of security-focused cloud architecture and networks.
• You have hands-on experience working with large-scale cloud platforms, highly concurrent systems, and related tools, such as Kubernetes, Terraform and Helm.
• You have hands-on experience securing cloud environments, at least for AWS.

Strong plus

• Ideally, you have relevant security and/or DevOps certifications, such as CKS, etc.
• You are familiar with GitHub, Jira and Confluence.

Further qualifications and skills

• You are a good communicator and you like to work in a team.
• You are interested in and keep up with trends and news from the InfoSec world.
• You are self-motivated to identify security problems and engage with teams to find solutions.
• You like to do in-depth research on your own and present the results to the team.
• You have programming experience, preferably with one or more of JavaScript, TypeScript, Swift, Kotlin, Java, Rust and Haskell.
• You have a thorough understanding of security code reviews, bug triage based on common metrics like CVSS, and vulnerability management.
• You have a practical, working understanding of basic cryptographic ciphers/algorithms and understand protocols or concepts like Elliptic Curve, TLS, Public Key Infrastructure and Messaging Layer Security.
• You have a strong understanding of application security frameworks like OWASP Top 10.
• You bring thorough knowledge of OAuth, SSO, Identity and Access Management systems.
• You are willing to subject yourself to the S2 security check of the German Government.