Security Architect, EQS

Salary not provided

PHP

CSS

HTML

JavaScript

Python

MySQL

ASP.NET

Senior and Expert level

Barcelona

Berlin

Corporate communications cloud software

Job no longer available

Corporate communications cloud software

501-1000 employees

B2BComplianceEnvironmentalCloud Computing

Job no longer available

Salary not provided

PHP

CSS

HTML

JavaScript

Python

MySQL

ASP.NET

Senior and Expert level

Barcelona

Berlin

501-1000 employees

B2BComplianceEnvironmentalCloud Computing

Company mission

To create trusted companies through technology that strengthens ethical business practices.

Job

Company

Role

Who you are

You have 7+ years of working experience of which at least 3 are in information security
You possess good knowledge of OWASP Top 10
Experience in or willingness to learn technologies like Application Penetration Testing, Static Code Analysis, Improvement of Application Security Architecture, Secure Development Life Cycle
Certifications like OSCP, OSEP, OSEE, OSWE (Offensive Security) or eCPPT, eCTHP, eCPTX, and eWAPT (eLearn Security) or willingness to obtain them
You’re comfortable working in an international team and communicating proficiently in English
Provide support for internal security-related projects to facilitate best practices across the company
You’re proactive and can recommend practical software and operational security improvements-evaluating and implementing enhancements
You have a knack for studying architecture/platforms and identifying security gaps in the development phase
You can analyze, understand, and further develop existing code bases regarding security flaws
You advise on best security development practices for current and new projects
Detail-oriented, precise, and effective communicator
Self-reliant and profound working methods
You have an analytical, independent, and results-oriented approach
Consolidated experience with IT system administration, networking, Cloud technologies, and programming/scripting languages
Understanding of DevSecOps, automation, orchestration, Security architecture, and frameworks such as TOGAF and/or SABSA
Ability to “think outside the box” and predict scenarios exploitable from threat actors
Knowledge of Security principles and techniques such as OWASP, SAST, and DAST
Competence in IT forensics technologies

Desirable

Relevant certifications in Cyber Security or Information Security Sector
Experience in software development or system administration
Software development background (Proficiency in PHP, MySQL, Python, and HTML / XML / XSLT / CSS / JavaScript / ASP.NET)

What the job involves

Our Information Security Department runs globally, with operations across Europe and India. Our structure is divided into three primary pillars: Audits, Certifications, and Assurance (ACA), Security Architecture (SecArc), and Security Operations (SecOps)
Champion the set-up, maintenance, and operation of the Security Architecture and Engineering functions
Collaborate with software development teams, site reliability engineers, and operational teams to ensure our services have appropriate security controls and processes
Contribute to the overall CISO strategy, goal setting, and programs
Manage relationships with third-party security providers
Create and maintain security orchestration and automation tools, including the cloud
Perform and communicate penetration testing across all EQS Group’s technologies
Coordinate and manage external penetration testing, vulnerability, and bug bounty programs

Our take

With consumers and investors concerned about the environmental and social impact of corporations and governments increasing regulations on carbon emissions and supply chains, businesses now must report on a range of metrics other than the bottom line. Aside from being the right thing to do, mistakes can be extremely costly both in reputation and in fines. Founded in 2000, EQS Group exists to make corporate compliance, investor relations and ESG reporting easier with its cloud-based EQS Cockpit resource.

The EQS Cockpit allows streamlining of a wide range of compliance processes, including relatively obscure matters such as whistleblower protection which have recently cost firms large amounts of money (see for instance Barclays receiving a $15 million fine along with massive reputational damage for failing to protect a whistleblower). In a time when governments such as Germany are increasing compliance requirements on supply chain to deal with the scourge of human trafficking, such a solution is likely to be particularly appreciated.

As expected of a company providing a much needed enterprise service, EQS Group has been in demand in recent years, seeing an almost 20% increase in revenue over 2022 and adding nearly 250 new corporate customers to its books. This growth is continuing, driven by the introduction of the EU whistleblower directive across the EU member states, a new investment from Thomas Bravo and by EQS Group's continuing marketing efforts as it expands into additional markets.