Senior Security Engineer (f/m/d)

Wire • Berlin, NY

1h • Remote

About The Position

Wire is seeking a Senior Security Engineer to join its Information Security Team and help protect its secure communications products and platform. The role works closely with the Director of Information Security and regularly collaborates with engineering, product, and other teams. It is a 12-month contract with the possibility of extension, based remotely from Germany or another EU country, with regular travel to the Berlin office for workshops and selected in-person collaboration sessions. The desired start date is as soon as possible, and the stated work schedule is 40 hours per week.

The role covers product security and platform security. Product security work includes reviewing security- or privacy-critical changes, supporting secure feature development, maintaining product security documentation with a focus on certifications, communicating with stakeholders, and contributing to audits, risk assessments, threat modelling, and security awareness training. Platform security work includes ownership of platform security controls, supporting technical due diligence, overseeing incident management, maintaining security and privacy process documentation, supporting identity and access management, and implementing and maintaining platform SecOps measures.

Requirements

• 5–7 years of previous working experience in Product Security.
• Proficient understanding of secure software development practices, including threat modelling and security architecture review for products.
• Hands-on experience assessing security and privacy risks in product features, such as authentication, encryption, data handling, and APIs.
• Working knowledge of cloud security fundamentals, such as AWS, and infrastructure tools including Kubernetes, Terraform, and Helm.
• Experience supporting security certifications or compliance frameworks, such as ISO 27001 and GDPR.
• Strong communication skills and experience engaging technical and non-technical stakeholders on security and privacy topics.
• Good communication skills and ability to work in a team.
• Self-motivation to identify security problems and engage teams to find solutions.
• Ability to conduct in-depth research independently and present findings to the team.
• Programming experience, preferably with one or more of JavaScript, TypeScript, Swift, Kotlin, Java, Rust, and Haskell.
• Thorough understanding of security code reviews, bug triage using common metrics such as CVSS, and vulnerability management.
• Practical working understanding of basic cryptographic ciphers and algorithms, and knowledge of concepts or protocols such as Elliptic Curve, TLS, Public Key Infrastructure, and Messaging Layer Security.
• Strong understanding of application security frameworks such as OWASP Top 10.
• Thorough knowledge of OAuth, SSO, and Identity and Access Management systems.
• Willingness to undergo the German Government’s S2 security check.
• Ability to work remotely from Germany or another EU country and travel regularly to the Berlin office for workshops and selected in-person collaboration sessions.

Nice To Haves

• Relevant security and/or DevOps certifications, such as CKS.
• Familiarity with GitHub, Jira, and Confluence.
• Interest in and ongoing awareness of trends and news in the information security field.

Responsibilities

• Review security- or privacy-critical changes and implement or propose solutions to potential issues.
• Maintain product security documentation, with a focus on product certifications.
• Communicate with internal and external stakeholders about product security topics.
• Support new feature development from a security perspective and identify security or privacy pitfalls early.
• Contribute to internal security audits, risk assessments, and threat modelling workshops.
• Conduct security awareness training within the area of responsibility.
• Own Platform Security controls.
• Support technical due diligence to ensure compliance with information security and data protection requirements.
• Oversee the incident management process and the team members involved in incident resolution.
• Maintain documentation of security- and privacy-related processes.
• Support Wire’s identity and access management.
• Drive implementation and maintenance of SecOps measures for the platform.

Benefits

• Participation in Wire’s long-term success through VSOPs.
• 30 days of vacation entitlement.
• Urban Sports Club subscription.
• Annual education budget of €1,000 and access to learning resources.
• Choice of working from anywhere or using the Berlin office for selected in-person collaboration.
• Fresh office breakfast, daily fruits, snacks, free soft drinks, and a barista coffee machine.

What This Job Offers

• Career Level: Senior
• Education Level: No Education Listed