Senior Software Engineer with security background (f/m/d)

Field of activity

The Asset Servicing department is responsible for the Custody and Connectivity products of Clearstream/DBAG. The application landscape mostly consists of Web, Java and C++ applications which are running on top of large customer databases. Frontend as well as backend security is a core concern in all applications due to the daily challenges and requirements of the financial sector.

Tasks/responsibilities

We are currently looking for a senior software engineer who is proficient in security related developments.
This position will require:

• Integrating into one of our software development teams as a senior developer
• Bridging the gap between security and development teams as a central point of contact
• Realising Clearstream/DBAG IT Security strategy requirements such as:
  • implementing & reviewing security components during design, coding and configuration
  • implementing new toolchain requirements (e.g. digital signing of code deliveries)
  • reviewing and sign-off of official security related documentation and corporate standards
  • organization and support of penetration tests
  • monitoring and reporting on security related topics
  • documentation of current & future security architectures and patterns
  • upskilling of people with respect to security best practices

Qualifications/required skills

• University degree in Computer Science
• Minimum experience of 5 years in Web, Java and/or C++ security related developments
• Excellent knowledge of either the Web, Java and/or C++ ecosystem and its tools
• Good knowledge of network protocols, digital certificates, cryptographic algorithms, PKI systems
• Good knowledge of security related development aspects such as most common vulnerabilities, penetration testing, static and dynamic code analysis, security best practices, etc.
• Openminded, eager to learn and share
• Being a team player and the willingness to integrate into the teams is a must
• Fluent in English (written and spoken). Any other language is an asset