Security Engineering Manager – Associate

Taxfix

Lead Product Security team for fintech platform Taxfix. Oversee security functions and manage a small team while driving strategic security initiatives.

Posted 4/30/2026full-timeBerlin • 🇩🇪 GermanyJuniorMid-LevelWebsite

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformKubernetesSDLC

About the role

Key responsibilities & impact

Lead and grow the team
Hire, coach, and develop Security Engineers - run meaningful 1:1s, set development goals, and actively manage performance
Build a high-performance team culture rooted in psychological safety, ownership, and continuous improvement
Champion AI adoption within the team - encourage AI-assisted workflows for security work (threat modeling, detection engineering, vulnerability triage) and continuously raise the bar on how AI is used to improve productivity
Evaluate capacity, balance reactive vs. proactive security work, and advocate for the resources your team needs
Own delivery and security posture
Own the team's outcomes against OKRs: prioritize effectively, track progress with metrics, and delegate without micromanaging
Own the technical direction for Product Security: application security, AI security, cloud security posture
Ensure rigorous vulnerability management, incident response, and security-in-SDLC practices
Shape security strategy
Partner with Technical Leadership and Architecture to align security work with the broader technology strategy
Own and evolve the security tooling stack: driving consolidation and effectiveness across the Taxfix group
Support AI security needs: LLM security risks, adversarial testing, secure integration patterns, and AI threat modeling
Evaluate technical trade-offs: balancing risk, cost, developer experience, and delivery speed, and communicate them clearly to stakeholders, framing impact in business terms, not just technical severity
Partner across the org
Bridge your team and its stakeholders: Product Engineering, AI Engineering, Platform, Data, and Architecture - embedding security early in the development lifecycle
Align priorities with peer EMs across Platform Engineering
Proactively surface blockers, manage dependencies, and keep information flowing
Communicate security posture, risks, and trade-offs clearly to engineering leadership and, where relevant, to compliance, legal, and executive stakeholders

Requirements

What you’ll need

8+ years in application security, DevSecOps, or security engineering with strong hands-on depth
Tech lead, team lead, or early management experience — with a clear desire to grow into engineering management and openness to being coached
Track record of leading technical initiatives end-to-end: scoping, executing, and rollout
Strong understanding of cloud security across at least one major provider (GCP preferred; AWS or Azure transferable), with multi-cloud experience as a plus
Experience with security tooling: CNAPP/CSPM platforms, vulnerability scanners, SAST/DAST, dependency scanning, and penetration testing coordination
Familiarity with cloud-native technologies (Kubernetes, CI/CD pipelines, Infrastructure as Code) sufficient to embed security controls into modern delivery pipelines
Familiarity with AI security — LLM security risks, adversarial testing, secure integration patterns
Active user of AI-assisted development tools (Claude, Copilot, Cursor, or similar)
Track record of driving outcomes using metrics, OKRs, or KPIs
Systems and outcomes mindset — able to prioritize the work that matters most and say no to the rest
Effective communicator across engineering, product, and leadership audiences — including framing risk in business terms for non-security audiences.

Benefits

Comp & perks

Holistic well-being with free mental health coaching sessions and yoga.
A monthly allowance to spend on an extensive range of services that you can use and roll over as flexibly as you like.
Employee stock options for all employees—because everyone deserves to benefit from the success they help to create.
30 annual vacation days and flexible working hours.
Work from abroad for up to six weeks every year. Just align with your team, and then enjoy your trip.
Plenty of opportunities to socialise as a team. In addition to internal tech meetups, our international team hosts regular get-togethers - virtually and in person when possible.
Free tax declaration filing, of course, through the Taxfix app - and internal support for all personal tax-related questions.
Have a four-legged friend in your life? We’re happy to have dogs join us in the office.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

application securityDevSecOpscloud securityvulnerability managementincident responsesecurity-in-SDLCAI securitypenetration testingKubernetesInfrastructure as Code

Soft Skills

team leadershipcoachingcommunicationprioritizationperformance managementcollaborationstrategic thinkingproblem-solvingadaptabilitymetrics-driven decision making