Position: Security Engineer
Company: United Software
Category: Security
Experience required: 3y
English level: upper

Our SaaS platform enables trustless data collaboration between organizations. Will you be part of our mission?

The most valuable data is often sensitive and restricted in how it can be used. Join us and make data useful while at the same time guarantee privacy by design. We leverage the latest advances in confidential computing, cryptography and privacy tech to build a cloud platform that enables companies to run analytics on unseen sensitive data in a privacy-preserving way.

Would you like to be central to our future success, contribute to the cutting-edge development of a revolutionizing and be a part of a team fueled by positive energy, enthusiasm and supportive colleagues?

The integrity and security of our platform are the core value propositions of our platform. As a security engineer, you will be focused on developing S-SDLC activities and controls that will ensure our platform is designed and implemented with regards to the highest level of security standards. 

Tasks
Secure design, architecture, and implementation covering all steps of our Secure Software Development Life Cycle (S-SDLC).
Ownership of external audits (ISO 27001, SOC2, ISO 27701) and internal security projects (vulnerability scanners, authentication & authorization, creation of new security practices, ...)
Create security documentation, including compliance as code as well as artifacts like whitepapers which will be made publicly available
Guide secure design discussions by threat modeling sessions and participate in risk assessments
Process for intrusion and threat detection, including regular external penetration tests

Requirements
4+ years of professional experience
Good communications and writing skills in English
Significant applied application security and cryptography experience
Deep technical understanding of common security vulnerabilities and risks, as well as countermeasures and compensating controls
Professional experience with security threat models
Understanding of application and cloud security frameworks such as OWASP’s and NIST CSF
Plus: Having been involved in security audits and penetration tests

Benefits
Work on making the world a better place by keeping personal data private.
Being able to create, shape, and benefit from a young company.
An amazing and fun team which is distributed over entire Europe
Competitive salary.
A lot of opportunities for self-development.