About
We prioritise privacy as a fundamental right, delivering the most secure communication experience across various industries. Our cutting-edge encryption technology and robust security measures have made us a trusted partner in the technology, finance, healthcare, and government sectors. If you are passionate about redefining secure communication and want to be part of an innovative team, join us within our Product Engineering organisation.
Responsibilities
•You review security- or privacy-critical changes and implement or propose solutions to potential issues
•You help to maintain security documentation of the product with focus on product certifications
•You communicate with internal and external stakeholders regarding product security topics
•You support new feature development from a security point of view to identify possible security or privacy pitfalls early in the process
•You contribute to internal security audits, risk assessments and threat modelling workshops
•You conduct security awareness trainings regarding your field of responsibility
•You are responsible for our Platform Security controls
•You support technical due diligence to ensure compliance with information security and data protection requirements
•You oversee the incident management process and team members involved in resolving the incident
•You help to maintain documentation of security- and privacy-related processes
•You support Wire's identity and access management
•You drive the implementation and maintenance of SecOps measures for our Platform
Requirements
•Proficient understanding of secure software development practices, including threat modelling and security architecture review for products
•Hands-on experience assessing security and privacy risks in product features (e.g., authentication, encryption, data handling, APIs)
•Working knowledge of cloud security fundamentals (e.g., AWS) and common infrastructure tools (Kubernetes, Terraform, Helm)
•Experience supporting security certifications/compliance frameworks (e.g., ISO 27001, GDPR)
•Strong communication skills and experience engaging both technical and non-technical stakeholders on security and privacy topics
•Good communicator who likes to work in a team
•Interested in and keeps up with trends and news from the InfoSec world
•Self-motivated to identify security problems and engage with teams to find solutions
•Likes to do in-depth research independently and present the results to the team
•Programming experience, preferably with one or more of JavaScript, TypeScript, Swift, Kotlin, Java, Rust and Haskell
•Thorough understanding of security code reviews, bug triage based on common metrics like CVSS, and vulnerability management
•Practical, working understanding of basic cryptographic ciphers/algorithms and understanding of protocols or concepts like Elliptic Curve, TLS, Public Key Infrastructure and Messaging Layer Security
•Strong understanding of application security frameworks like OWASP Top 10
•Thorough knowledge of OAuth, SSO, Identity and Access Management systems
•Willing to subject yourself to the S2 security check of the German Government
Nice to have
•Relevant security and/or DevOps certifications, such as CKS, etc.
•Familiarity with GitHub, Jira and Confluence
Conditions
•This role can be performed remotely from Germany or another EU country
•Regular travel to our Berlin office for workshops, and selected in-person collaboration sessions is expected
•Join a market-proven company with more than 1,000 customers and help Wire become the trusted secure communications partner for organisations that care deeply about security and privacy
•Participate in Wire's long-term success through VSOPs
•30 days of vacation entitlement, allowing you to take well-deserved time off and maintain a healthy work-life balance
•Urban Sports Club subscription to stay balanced and mentally and physically healthy
•Investment in professional development with an annual education budget of €1,000 and access to top-notch learning resources
•Work from a beautiful office in the heart of Berlin or choose a mix of working from anywhere vs. spending selected days together in the office to connect on a personal level
•Fresh breakfast in the office, daily fruits, snacks, free soft drinks, and a Barista coffee machine
