Security Engineer, AutoScout24
3 days a week in office
New and used car marketplace
Open for applications
New and used car marketplace
501-1000 employees
Open for applications
3 days a week in office
501-1000 employees
Company mission
To help make mobility decisions easier for everyone.
Role
Who you are
- A genuine interest and passion in security
- More than two years of working experience as a Security Engineer
- Hands-on experience with AWS and a solid understanding of secure architecture and secure development principles in cloud environments
- Strong knowledge of common attack vectors and defence strategies (for example, OWASP Top 10)
- Experience designing and building security products, ideally leveraging open-source solutions
- Experience partnering with software engineers and providing security guidance throughout the software development lifecycle
- Deep understanding of SAST and other code security detective and preventive controls and their integration in development process and pipelines of engineers
- Proficiency with at least one programming language (preferably Python but it's not a must)
- Experience with our stack of technologies: (AWS, CDK, ECS, Docker), SaaS solutions (e.g. GitHub, SonarQube, Okta), Python based backend tools and authentication protocols (OAuth and OpenID)
- Enjoy working with Unix environments and command-line tools
- Experience using AI and GenAI to improve engineering productivity, automate repetitive tasks, and streamline workflows
- A proactive approach to exploring and adopting AI tools that help teams move faster
- Understanding of emerging AI-related threats and practical approaches to reducing those risks
- You will succeed in this role if you:
- Enjoy solving large-scale, complex challenges
- Take ownership of the solutions you design and build, seeing them through from idea to production
- Pragmatically balance short- and long-term priorities and make decisions based on data
- Are comfortable with ambiguity and enjoy tackling open-ended problems
- You have a customer first mindset and care about improving developer experience by applying effective, well-designed security controls
- You make every system you work inherently better
- A pragmatic view of GenAI: you understand its limitations and risks and know how to put guardrails in place (reviews, tests, policies) to keep usage safe, compliant and sustainable at scale
What the job involves
- Join the AutoScout24 security team and be part of our Information Security team that is a highly skilled group supporting all our teams to build and run secure digital products
- We have understood that cyber security is an essential part of our business and including it in all our initiatives is natural. We are looking for Security Engineer that who really cares – for you!
- Own end-to-end risk management. You’ll identify areas of risk, assess our environment and validate whether the risk is present, build detective and preventive controls to quickly identify indicators, track risks in our risk registry, and partner with teams to mitigate issues
- Design and build security products and ensure they align with our infrastructure strategy and integrate smoothly into the software development lifecycle
- Define and improve our security best practices and lead initiatives to increase their company-wide adoption
- Promote adoption of the security products our team provides and support other teams in understanding our best practices and applying them to their use cases and needs
- Be responsible for multiple technical areas or processes within the team. Lead technical discussions and improvements around them
- Participate in the on-call rotation and “cop of the day” duties: triage and respond to security alerts, support user requests, monitor our tools for errors, and coordinate with engineering teams as needed
- Implement security compliance controls owned by our team for SOC 2 and PCI, and support the GRC team in the broader compliance effort
- Investigate and remediate security incidents, and occasionally serve as the incident commander
Our take
AutoScout24 is an online classifieds platform for new and used vehicles that’s been expanding its reach across 10 European markets for over two decades now. This period, however, offers a unique opportunity for growth - and AutoScout24 appears to be taking full advantage.
Both the new and used cars markets saw a big kick recently, as semiconductor shortages hobbled production lines and backlogs saw consumers opting for used vehicles instead. This meant big movement on the AutoScout24 platform, and the company used that to renovate its offering.
As it takes full advantage of the market, it has recently expanded its global reach by acquiring Canada's Trader Corporation, strengthening its position in both European and Canadian markets. A promising acquisition that positions AutoScout24 for continued growth in the automotive sector.
Steph
Company Specialist at Welcome to the Jungle
Insights
5% employee growth in 12 months
Company
Company HQ
Au-Haidhausen, Munich, Germany
Leadership
Peter Brooks-Johnson
(CEO)They joined AutoScout24 in 2023 at CEO. Prior to this, they spent over 16 years at Right move as a Product Director and CEO. They are also an experienced Consultant having worked at The Berkeley Partnership and Andersen Consulting.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 8 more jobs at AutoScout24