Job
- Level
- Experienced
- Job Field
- IT, Application, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Salary
- from 54.439 € gross/year
- Location
- Linz
- Working Model
- Hybrid, Onsite
Job Summary
In this role, you will enhance the Secure Software Development Lifecycle, conduct risk analyses, and integrate security tools into CI/CD pipelines to continuously improve product security.
Job Technologies
Your role in the team
- Further development and establishment of the Secure Software Development Lifecycle (SSDLC) according to IEC 62443-4-1.
- Conducting threat modeling as well as risk and security analyses.
- Integration of security tools (SAST, DAST, and Software Composition Analysis) into existing CI/CD pipelines.
- Creation and management of Software Bills of Materials (SBOM).
- Monitoring and assessment of security vulnerabilities (CVEs) and derivation of appropriate measures.
- Analysis, documentation, and processing of security findings.
- Consulting and support for software development in secure coding and DevSecOps.
- Close collaboration with development, architecture, and quality teams to continuously improve product security.
This text has been machine translated. Show original
Our expectations of you
Education
- Completed technical education (HTL, FH, or university) with a focus on computer science, IT security, or cyber security.
Qualifications
- Know-how in vulnerability management as well as in handling SBOM and security tools like Dependency-Track.
- In-depth knowledge of OWASP, CVSS, and Secure Coding.
- Independent, structured, and solution-oriented way of working.
- Team orientation as well as enjoyment of collaboration with development departments.
Experience
- Several years of experience in software development, for example with C/C++, Java, or Python.
- Experience with CI/CD pipelines as well as modern DevSecOps processes.
- Knowledge of the IEC 62443 standard and experience in the field of Application Security.
This text has been machine translated. Show original
What we offer
- The gross annual salary according to the collective agreement is at least € 54,439.42 for this position.
- Depending on education, qualifications, and experience, a significant overpayment may be possible.
- Participation in innovative technologies for the energy industry.
- Long-term perspective in an economically stable and future-proof company.
- Flexible working hours and home office options.
- Independent work with a lot of creative freedom.
- Structured onboarding and individual development.
This text has been machine translated. Show original
Benefits
Higher Take-Home Pay
Food & Drink
Work-Life-Integration
Health, Fitness & Fun
Topics You Will Work On
Job Locations
About Your Employer
VACE Engineering GmbH
Die VACE Engineering GmbH (Teil der VACE Group) ist ein führendes österreichisches Unternehmen im Bereich der Technologie- und Personalberatung mit Hauptsitz in Linz. Das 1981 gegründete Unternehmen beschäftigt in der gesamten Gruppe rund 700 bis 1.000 Mitarbeitende und deckt schwerpunktmäßig die Bereiche Engineering, IT-Sicherheit und HR-Dienstleistungen ab.
Description
- Company Type
- Recruiting Agency
- Industry
- Recruitment Agency
Product Security Engineer
- Salary
- from 54.439 € gross/yearEstimated net salary based on the gross salary in the job ad.from 38.139 € net/year
- Location
- Linz
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
