• Collaborate closely with our DevOps, CI/CD engineers, and Architecture team • Implement and maintain security best practices across our infrastructure • Leverage your expertise in security architecture to help engineers build and securely operate products and services from the ground up • Assess, design, and implement security processes and controls to meet security, compliance, and audit requirements • Conduct proactive research to identify emerging threats and attack vectors • Collaborate within a highly agile product security team and across other cross-functional teams

• Collaborate closely with DevOps, CI/CD engineers, and Architecture team to implement and maintain security best practices across our infrastructure. • Leverage your expertise in security architecture to help engineers build and securely operate products and services from the ground up • Assess, design, and implement security processes and controls to meet security, compliance, and audit requirements • Conduct proactive research to identify emerging threats and attack vectors • Collaborate within a highly agile product security team and across other cross-functional teams

• Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST), review their outputs, and assist the development team with remediation strategies. • Configure and manage security tools such as Checkmarx and leverage GitHub's native security features to scan vulnerabilities in the codebase and dependencies. • Ensure integration of security scans within our CI/CD pipelines to identify vulnerabilities early in the development process. • Implement and enforce security best practices for containerization within AWS ECS and ECR environments, focusing on secure configurations, image scanning, and robust access control measures. • Lead the coordination and management of vulnerability scanning and remediation efforts across the application stack, encompassing the codebase, containers, and AWS infrastructure. • Conduct thorough penetration testing on products and systems, including web applications and services, to identify and exploit security flaws. • Participate in triage calls with cross-functional teams and effectively communicate vulnerability details, risks, and potential impacts to stakeholders.

• leitest komplexe Projekte im Bereich Cybersecurity und IT-Risiken innerhalb eines internationalen Programms • bringst deine Expertise in Informationssicherheit ein und steuerst die Umsetzung sicherheitsrelevanter Anforderungen • koordinierst Ad-hoc-Anfragen und priorisierst Aufgaben zur Einhaltung von Projektzeitplänen • strukturierst Projekte und planst Ressourcen für eine erfolgreiche Umsetzung • überwachst IT- und Business-Projekte und stellst sicher, dass IT-Risiken und Sicherheitsaspekte berücksichtigt werden • steuerst die Zusammenarbeit zwischen verschiedenen Stakeholdern und förderst eine effektive Kommunikation • entwickelst kreative Lösungsansätze für komplexe Herausforderungen im Cybersecurity-Umfeld • kommunizierst Anforderungen und Änderungen im IT- und Cyber-Risiko-Referenzrahmen und integrierst diese in Projekte und Assets