Senior Security Engineer (d/f/m)

About the role

Paymenttools is looking for a Senior Security Engineer (d/f/m) to embed security best‑practice across its cloud‑native payment platform. You will work closely with software engineers to ensure secure coding, architecture and DevSecOps automation throughout the development lifecycle.

Key responsibilities

• Act as the application security subject‑matter expert and promote secure coding practices.
• Design, deploy and roll out security platforms and integrate controls into CI/CD pipelines (GitHub Actions).
• Lead DevSecOps maturity initiatives, including automated vulnerability management and threat‑modeling workshops.
• Collaborate on Identity & Access Management design for distributed systems, including role‑based access control and OAuth2/OIDC.
• Document security implementations and contribute to engineering security standards.

Required profile

• Strong background in security engineering with focus on application security in cloud‑native environments (Kubernetes, PostgreSQL).
• Hands‑on experience with DevSecOps tools, CI/CD integration and Infrastructure as Code (Terraform or OpenTofu).
• Proficiency in scripting/automation using Python or Golang.
• Experience in regulated FinTech or similar environments; knowledge of compliance frameworks (ISO 27001, PCI‑DSS, KRITIS) is a plus.
• Excellent English communication; German is a plus.

Required skills

• Kubernetes
• PostgreSQL
• GitHub Actions
• Terraform / OpenTofu
• Python
• Golang
• Google Cloud Platform (GCP)
• CNAPP platforms (e.g., Wiz)
• IAM design, role‑based access control, OAuth2, OIDC
• CI/CD pipeline security
• DevSecOps tooling