Senior Security Engineer H/F

Malt

Explore your future career Malt is growing rapidly. In order to achieve our ambitious goals, we are offering you the opportunity to join Malt as a Security Engineer. The Security squad plays a crucial role within the product team dedicated to ensuring the security of our freelancers and clients. Additionally, the squad collaborates with IT at the company level to ensure to provide all departments with the necessary tools for secure and efficient work. Considering the evolving security landscape and potential threats, the squad extends to face these challenges.

Key responsibilities

- - Engage in vulnerability management activities: reduce the vulnerability backlog, industrialize SCA/SAST & DAST, maintain and improve the bug bounty program, organize internal pentests, and ensure 100% of developers are trained in secure coding practices.
- Strengthen corporate & product security by developing and maintaining the alerting system on the SIEM, and responding efficiently to security alerts.
- Engage in incident response activities, which involve identifying incidents through a monitoring plan (including rule detection and associated dashboards), assessing their existence and their severity, and finally efficiently resolving them.
- Enhance platform security by designing and implementing solutions to proactively mitigate cybersecurity risks and detect any unfair usage of the platform.
- Support, advise and make autonomous the engineering teams in the implementation of security best practices.

You will also participate in improving the security excellence of the development team, spread the security best practices at Malt, participate in our communities of practices (SRE, security, back-end, and front-end in particular), and increase your knowledge thanks to an active watch in the field of security and software. You will participate in the animation of our security community of practice gathering members of all squads: software, cloud, and data engineers experienced and passionate about software security. At Malt, we believe that curiosity is an asset. The whole squad participates in the product architecture, all decisions are collegial, and we regularly engage in discussions on the best way to do things.
Our Tech Stack

- - Frontend: TypeScript, Vue.js, Nuxt, Internal Design System, Stencil.js
- Backend: Kotlin, Java Spring Boot, Gradle, PostgreSQL, MongoDB, Elasticsearch, RabbitMQ, Redis
- Platform: Google Cloud Platform, Kubernetes, Terraform, ArgoCD, Gitlab CI
- Mobile: Swift, KotlinData: Big Query, Looker, Spark, Python
- We practice continuous integration and delivery, we update Malt around 70 times per week in production. We intensively use Datadog for production monitoring and alerting.