Cyber Security Staff Engineer, Solaris
Application Security
€85-110k
Banking-as-a-Service platform
Open for applications
Banking-as-a-Service platform
501-1000 employees
Open for applications
€85-110k
501-1000 employees
Company mission
To create a world where financial services seamlessly sync with life.
Role
Who you are
- Depending on your level of experience, your responsibilities and scope of role will range. We don’t care much about fancy titles, but rather about real personal and professional development, as laid out in our learning framework. Let’s figure together out how you can contribute to our team
- A degree in Computer Science, Software Engineering, Information Technology, Cybersecurity, or equivalent professional experience
- 6+ years of experience in dedicated Application Security, DevSecOps, or Software Engineering roles with a strong focus on security in high-growth cloud environments (Fintech or highly regulated environment is a plus)
- Proven experience analyzing and securing code written in our core tech stack/modern languages (e.g., Java, Go, Python, TypeScript, or Rust)
- Deep understanding of web application vulnerabilities, API security, and exploitation techniques (OWASP Top 10, CWE)
- Hands-on experience integrating security testing tools into modern CI/CD pipelines (e.g., GitHub Actions, GitLab CI, Jenkins, Snyk, Semgrep)
- Experience with cloud computing infrastructure (AWS, GCP, or Azure), containerization (Docker), and orchestration (Kubernetes)
- Experience managing or triaging external penetration testing reports and crowdsourced bug bounty programs
- Understands agile workflows and lean principles
- Experience by doing threat modeling
- Individual Contributor, technical mentorship focus
- Business proficient written and spoken English. German is a plus
- Ability to translate complex cryptographic or technical security vulnerabilities into business risk for non-technical stakeholders and actionable fixes for developers
- Empathic collaborator who builds bridges between security goals and engineering targets, avoiding the "department of No" stereotype
- Strong analytical mindset capable of finding creative ways to secure cutting-edge application architectures
- Ability to thrive in a fast-paced environment and adapt security strategies to evolving product frameworks
- Proactive peer that helps the growth of the team
- Curious, constant learner that is willing to share learning with others
- Unfortunately, many promising candidates tend to apply only if they meet all the criteria. So if you think you have what it takes, but don't necessarily meet every single item in the job description, please contact us anyway. We'd love to talk with you and find out if you might be a good fit for us
What the job involves
- Integrate security seamlessly into the Software Development Lifecycle (SDLC) and DevSecOps pipelines by automating security gates (SAST, DAST, SCA, and container scanning)
- Conduct thorough threat modeling and architectural security reviews for complex applications, APIs, and microservices prior to deployment
- Perform deep-dive manual and automated secure code reviews across various codebases to identify logic flaws and subtle implementation vulnerabilities
- Build and maintain "secure-by-default" internal libraries, frameworks, and developer tools to systematically eliminate entire classes of vulnerabilities
- Take ownership of the application vulnerability lifecycle, including triaging, validating, and prioritizing vulnerabilities originating from internal testing, penetration tests, and external bug bounty programs
- Act as a strategic partner to product and engineering teams, providing pragmatic mitigation guidance that balances product velocity with security assurance
- Design and deliver modern, hands-on secure coding training and security awareness initiatives for engineering teams (e.g., addressing OWASP Top 10, LLM/AI security risks)
- Support incident response and detection teams during application-level security incidents or potential data breaches, leading post-mortem analysis for software flaws
- Ensure application security controls remain fully compliant with relevant financial data protection regulations, fintech standards, and internal tech policies
- Owners of this function make sure that they follow the defined Policies & Procedures for the institution (which includes explicit processes defined for Tech, which are properly defined in the respective confluence spaces)
- Take ownership of the tech responsibilities as described in our Change Management Policies
Our take
Many obstacles in place prevent companies from offering their own financial services. Complex and high-cost processes mean that companies find it difficult to build their own banking systems or even apply for a banking license. This can stunt development as it reduces a company's growth and expansion options.
Solaris offers a Banking-as-a-Service platform that allows companies to seamlessly integrate financial services within their existing operations, removing traditional hurdles that companies would have to face. The company differs from the competition through the use of an API for optimal integration. It also holds a full German banking license, granting it an efficient position to deal with any red tape and complex processes, taking this strain away from companies.
Through moves such as its acquisition of MER, as well as many other collaborations, Solaris has paved the way for increased operations across Europe to now offer significant market coverage. In the long run, the company aims to be the core banking service across Europe and a foundational platform through which all companies integrate financial services into their ecosystem.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-2% employee growth in 12 months
Company
Funding (last 2 of 9 rounds)
Feb 2025
$163.9m
SERIES G
Mar 2024
$104.5m
SERIES F
Total funding: $761m
Company benefits
- Learning & development budget
- Remote working allowance
- Free online yoga
- Referral program
- Mental healthcare service
- Public transport allowance
- Partial lunch reimbursement
- Additional vacation days
- Glasses for laptop work
- Fruits and drinks at the office
- Volunteering days
Company HQ
Wrangelkiez, Berlin, BE
Leadership
Carsten Höltkemeyer
(CEO)Joined Solaris in 2022 as CEO. They are also an Executive Chairman at auxmoney. Previously they were the CFO of Merchant Services at Nets Group. CFO of Concardis Payment Group at Concardis, and a General Manager of Barclaycard Hamburg.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 15 more jobs at Solaris