Staff Security Engineer

Germany·BerlinPermanent - full timelead

EngineeringSecurity Engineer

0 views0 saves0 applied

Apply Now

Quick Summary

Overview

At PPRO, our mission is to simplify access to local payment methods and our vision is to enable the sale of goods and services to anyone in the world using their preferred way to pay.

Technical Tools

EngineeringSecurity Engineer

At PPRO, our mission is to simplify access to local payment methods and our vision is to enable the sale of goods and services to anyone in the world using their preferred way to pay. We empower partners such as Ant Group, PayPal and Stripe to access new markets, connect with more customers, and accelerate their growth.

Our strength lies in our diverse global team with 50+ nationalities and 10+ international locations- all united around one goal – to deliver the best possible products and services to our partners and customers. While our company mission is to keep innovating global commerce, our internal mission is to #chooseaction, #beopen, #thinkcustomer, #gofurther and #wintogether

The Purpose:

As Staff Security Engineer at PPRO, you’ll act as the technical lead for the Security Engineering (SecEng) team, driving technical and operational excellence while coaching and developing your colleagues. You’ll be pivotal in supporting our mission to build robust, secure, and resilient systems.

This role offers the opportunity to apply deep security expertise across application and cloud domains. You’ll serve as the primary technical interface for the wider organisation, influencing architecture and guiding engineering teams to embed a “secure by design” philosophy in everything we build.

You will be the main technical point of contact between the SecEng team and engineers across the organization. You’ll design secure solution architectures and build Security as Code solutions that enable consistent controls and high-velocity delivery. You will perform security assessments for new projects and technologies, utilizing threat modeling to identify risks early and define standardized, repeatable security patterns for the wider engineering team. If you thrive on finding win-win solutions that embed security into modern development workflows to safeguard our customers, this will be a great opportunity to have a positive impact at scale across the payments ecosystem.

Act as technical lead for the Security Engineering team, setting technical direction and coaching and mentoring engineers.

Serve as the external interface for the team, partnering with Engineering and Product teams to unblock them and embed security into all stages of the software development lifecycle.

Design and build reusable Security as Code artifacts and patterns that reduce developer friction while improving security outcomes.

Own the security of our cloud environment across AWS and GCP: conduct risk assessments and architecture reviews, design secure solutions, and write hardening standards and security guidelines.

Maintain and expand our Infrastructure as Code codebases and CI/CD pipelines, and develop automations for cloud security posture management (CSPM) and our Cloud Native Application Protection Platform (CNAPP).

Conduct threat modelling across applications, services and cloud systems, and create detection rules for our SIEM.

Provide expert application, product and cloud security guidance, and drive security assessments and penetration testing initiatives.

Establish and share security standards and best practices across teams, consulting stakeholders and making data-driven decisions.

Explore how AI can solve security problems, and drive proactive improvements from emerging security trends and technologies.

Results-oriented, highly collaborative, pragmatic and proactive, and with a continuous improvement mindset.

A natural technical leader: able to guide, coach and mentor engineers, lead cross-team collaborations, and act as a trusted interface between security and the wider engineering organization.

Strong interpersonal and communication skills, able to unblock teams and foster security awareness throughout the company.

Deep experience across both application/product security and cloud security, with a strong background in software development.

Experience designing and building scalable security controls, architecture and services, taking strategic decisions and having a wide impact.

Strong expertise in cloud (preferably AWS, and GCP) and container security (Kubernetes, Docker).

Deep understanding of DevSecOps and CI/CD security controls, with hands-on experience in Infrastructure as Code (preferably Terraform), CI/CD pipelines (preferably GitHub Actions) and scripting (Python, bash).

Fluency with AI coding tools and curiosity about applying AI to security problems.

Developer mindset and empathetic approach to find innovative “win-win” solutions.

Security qualifications a bonus.

Excellent communication and collaboration skills and fluent proficient in English.

If you’re passionate about security and eager to make a significant impact in a fast-paced environment, we’d love to hear from you!

What's in it for you?

Hybrid working - We offer a hybrid structure with a 3 days / week on site expectation, so you can strike the balance between office and home working. In addition to our 30-day holiday allowance, we also provide a work from abroad policy, enabling employees to work remotely for up to another 30 days per year.

Learning and Development - We offer a €1,000 annual budget to support your professional growth—because investing in your development benefits us all. In addition, we provide leadership cafés, on-the-job training, and other opportunities to help you grow your skills and thrive in your role.

Insurance - Because better safe than sorry - we want our employees to benefit from various insurances including accident insurance, disability insurance, direct insurance (bAV) and travel insurance.

Gym membership - PPRO helps contribute towards the costs of your gym membership, supporting your physical fitness journey while easing the burden on your wallet

Enhance Family Leave - We understand the importance of family - that's why we offer enhanced family leave to support you during key life moments.

Mental Health Platform - We’ve teamed up with a top well-being platform to provide one-on-one therapy, chat therapy, therapist-led courses, guided meditations, and more.

Pet-friendly office - Because work is better with your paw-tners by your side

Our Principles:

We get things done: We are courageous; we take ownership, make decisions and get things done.

We act with trust and integrity: We listen first and challenge respectfully. We seek out and leverage diverse perspectives. We welcome and offer honest and open feedback, always assuming positive intent

We put the customer first: We are laser focused on delivering outstanding outcomes for our customers. We put the customer at the heart of what we do.

We make things better: We boldly explore new ideas and have an unwavering commitment to continuous improvement.

We work as a team: We collaborate closely and value team success over individual achievement.