Information Security Engineer

Role Responsibilities:

• Vulnerability management: triage findings from SCA, container and code scanning, external reports and internal security testing; assess whether Camunda is actually affected; agree fix, mitigate, or accept with engineering and follow through to release.
• Threat modeling and security reviews: run threat modeling sessions and design reviews with R&D teams for new features and architecture changes, and turn results into concrete, prioritized actions.
• Code analysis with LLMs: use and improve LLM-assisted tooling to review code, validate findings, and reproduce issues while applying your own judgment.

Qualifications:

• Around 3+ years in security or software engineering, with at least 2 of them working on application or product security.
• Experience at a SaaS or software product company working closely with engineering teams in modern CI/CD and cloud environments.
• Hands-on vulnerability triage with tools like Snyk, Trivy, Semgrep, or CodeQL.
• Threat modeling and design review experience on real systems such as web apps, APIs, or distributed services.
• Proficiency in Java and ability to write scripts and build tools, with experience using AI coding agents in daily work.

Benefits & Perks:

• Remote and flexible work with home office budget, co-working space support, and flexible time off to recharge when you need it.
• Health and wellbeing: access locally tailored healthcare, Modern Health for global mental wellbeing, and a Live Well Lifestyle Spending Account.
• Financial security: retirement and pension plans with company contributions, plus life and disability insurance where relevant.
• Professional growth: up to $1,000 per year for self-driven learning including courses, certifications, and books.