WhoFinance GmbH

Security Engineer

• Integrate SCA, SAST, and DAST tools into CI/CD pipelines
• Implement Zero-Trust security principles across infrastructure
• Design and deploy secure and scalable secrets management solutions
• Develop comprehensive threat models for all services
• Conduct frequent penetration testing of internal applications and services
• Establish unified vulnerability management pipelines
• Ensure compliance with industry security standards (SOC 2, ISO 27001, NIST)
• Collaborate with development and operations teams to advocate for security best practices
• Automate security-related tasks using scripting and security orchestration
• Research and implement emerging security technologies, particularly in blockchain and cryptographic security

Senior Product Security Engineer