Senior Security Engineer (m/w/d)

As a Senior Security Engineer at AutoScout24, you will be responsible for leading the design and development of security products that integrate with our technology and best practices. Your role will include consulting with various teams on security use-cases, defining company-wide security best practices, and owning critical areas of technical security. You will also troubleshoot incidents and participate in on-call setups, ensuring the robustness of our digital products.

To apply for the Senior Security Engineer role at AutoScout24, candidates should possess a strong foundational knowledge of security practices, with a focus on attack vectors and defense strategies, such as the OWASP Top 10. Ideally, you should have hands-on experience in building secure architectures, particularly in AWS Cloud environments, alongside at least 2 years of experience as a Security Engineer.

The Senior Security Engineer at AutoScout24 plays a critical role by ensuring that our programs and products are designed with security at their core, which directly affects our business’s integrity. By promoting best practices and collaborating across teams, you will drive a culture of security that not only protects our data but also builds customer trust in our digital products.

In the Senior Security Engineer role at AutoScout24, you will work with an array of tools and technologies including AWS, Docker, Kubernetes, and various SaaS solutions like GitHub. Experience with programming languages, especially Python, is beneficial, alongside familiarity with open-source frameworks and tools to enhance development efficiencies.

AutoScout24 offers a robust benefits package for Senior Security Engineers which includes flexible working hours, the option for home office work, and generous vacation time. We also invest in your professional growth with targeted training, provide high-quality equipment, and foster a welcoming and inclusive work culture, complete with a dog-friendly office.

In answering this question, focus on specific projects where you've designed or contributed to security architectures. Mention the technologies you used and the challenges you faced. Highlight your understanding of integrating security within the software development lifecycle (SDLC) as well.

Discuss the resources you utilize, such as security publications, blogs, webinars, and conferences. You could mention any communities or forums you participate in, emphasizing your proactive approach to continuous learning in the ever-evolving field of cybersecurity.

Share specific instances where you've implemented security measures for cloud services, particularly in AWS. Discuss the controls you put in place, including identity and access management, monitoring, logging, or incident response plans tailored to cloud environments.

Be prepared to list and explain various security frameworks you have worked with, such as NIST, ISO 27001, or CIS Controls. Explain how you’ve applied them in practice and the benefits they provided to your previous organizations.

This is an opportunity to demonstrate your problem-solving skills. Provide a structured answer using the STAR method (Situation, Task, Action, Result). Describe what the incident was, your role in the response, and what you learned from the incident to improve future security posture.

Explain your approach to embedding security practices within the SDLC. Discuss methods like threat modeling, secure coding practices, and regular security audits as integral parts of the process rather than an afterthought.

Talk about specific tools or scripts you've created or used to automate security practices, such as vulnerability scanning, compliance checks, or incident response actions. Emphasize the impact automation had on your team’s efficiency.

Focus on your communication skills during conflicts. Share strategies for respectfully discussing differing views, emphasizing evidence-based approaches and a collaborative mindset to come to a mutual decision.

Offer your insights into how AI can enhance security measures, including automating threat detection and response, predicting unusual behavior, or optimizing processes. Mention any AI tools you've used or are interested in leveraging.

This is your chance to show your enthusiasm for the company. Share what you find appealing about AutoScout24's culture, commitment to security, and innovative projects. Relate your values and career goals to the opportunities available at the company.