? Solo Quedan 15H Senior Security Engineer - Application Engineering

.In 2013, while living abroad, our founders set out to create an online tool that could turn huge PDFs into small, easy-to-send versions in order to send updates to their families. As it turns out, they weren't the only ones with this problem. 10 years later, Smallpdf is one of the most popular PDF tools in the world and among the most visited websites globally. With products available in 24 languages, the site has visitors from every single country in the world, plus Antarctica, and processes millions of documents each day.In 2022, we took a big step forward by acquiring PDF Tools, a Zurich-based pioneer for products that help to create, manipulate, and validate PDF- and PDF/A- files to support and improve our customers' document workflows.As a team of over > 100 people from 34 nationalities in our offices in Zurich, Belgrade, and Barcelona, we're proud to have made PDFs and life a little bit easier for over a billion customers across our web, mobile, and desktop applications. Our reputation for Swiss engineering standards has made us a trusted choice for industry leaders like Lufthansa, UBS, Swiss Life, and millions of people worldwide.What you will do:As Senior Security Engineer at Smallpdf, you will lead the efforts to ensure that our software and systems are designed and implemented to the highest security standardsYou will perform technical security assessments, code reviews, vulnerability testing, and advanced monitoring to highlight risks, helping Smallpdf improve securityYou will also work closely with other engineers to design and build processes and guidelines to enhance our securityYou will participate actively in ISO 27001 certification and PCI DSS 4.0 SAQ certificationYou coordinate cybersecurity risk assessment and routine penetration testingResponsibilities:Partner with internal product teams to continuously improve the security of our productConduct research to identify new attack vectors against Smallpdf products and servicesDevelop technical solutions to help mitigate security vulnerabilitiesPromote and advise security and secure practices throughout SmallpdfContribute to the certification and audit processes (ISO 27001, PCI DSS 4.0 SAQ, SOC-2)Foster a culture of security awareness within SmallpdfCollaborate with developers to integrate security best practices into the application development process (DevSecOps)Design, implement, and maintain security controls for our cloud-based applications using L7 security tools (e.G., Web Application Firewalls)Develop and document security policies and proceduresRequirements:Bachelor's degree in Computer Science or equivalent practical experienceExcellent communication and collaboration skillsTechnical knowledge of security engineering, computer and network security, authentication, and security protocolsExperience in coordinating and validating penetration testsFamiliarity with common vulnerabilities (OWASP, etc.