{"id":202967,"url":"https://alion.io/job/vivenu-senior-security-engineer-appsec-dfm","title":"Senior Security Engineer - AppSec (d/f/m)","company":{"id":39986,"name":"Vivenu","domain":"vivenu.com","url":"https://alion.io/company/vivenu","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":88,"open_postings":27,"ghost_share":0,"stale_share":0.296,"repost_share":0,"time_to_fill_p50_days":92,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Germany"],"countries":["DE"],"hiring_countries":["DE"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":88000,"max_usd":167000,"period":"year","method":"role_seniority_country_cell","sample_n":19},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ArgoCD","optional":false},{"name":"CI/CD","optional":false},{"name":"EPSS","optional":false},{"name":"GCP","optional":false},{"name":"GitOps","optional":false},{"name":"Kubernetes","optional":false},{"name":"Red Teaming","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Threat Modeling","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GitHub","optional":true},{"name":"Go","optional":true},{"name":"PCI DSS","optional":true},{"name":"Terraform","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-09-04T12:28:07Z","employer_posted_date":"2026-09-04","last_verified_at":"2026-11-03T05:04:22Z","board_verified":true,"closed_at":null,"days_open":59,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":59},"description":"With over 10 million end users and usage quadrupling annually, our infrastructure now handles over 1 billion requests per month - and counting. Our API-first platform solves complex system challenges at scale - delivering performance, flexibility, and reliability for the world’s leading live entertainment brands.\nThis isn't just a maintenance role - it is a blank canvas to build, scale, and architect a state-of-the-art AppSec program from the ground up. We are currently operating at a fraction of our ultimate potential, which means you have an immense, blank-canvas opportunity to fundamentally shape our security culture, processes, and tooling across the entire global engineering organization.\nYou will drive the entire AppSec lifecycle: from offensive red teaming and threat modeling to risk-based vulnerability management and pioneering a true shift-left culture.\nWhat Makes This Role Challenging and Engaging:\nHigh-Impact Technical Environment: You won't just follow blueprints; you will holistically influence a shift-left architecture across both application and platform layers.\n\nModern Technology Stack: Dive into securing a massive TypeScript monolith alongside Go supporting services, giving you hands-on experience in modern language security and advanced GitHub CI/CD pipeline hardening.\n\nWeb and API: secure the application of the vivenu platform which provides customers with an out-of-the-box ticketing software as well as the underlying API structure\n\nComplex Multi-Cloud Architecture: Challenge your skills against a sophisticated multi-tenant, multi-region environment spanning k8s, GCP (our primary compute) and and separate database services\n\nCutting-Edge Deployment: Secure a next-gen Kubernetes \"satellite architecture\" utilizing hardened private compute nodes, VPC peering, and Argo CD for GitOps-a true, modern cloud-native security mandate.\n\nAs a Senior Security Engineer - AppSec (d/f/m) your responsibilities will include:\nBe a Trusted Advisor: Partner closely with engineering teams to champion security-by-design and elevate our overall security posture.\nOffensive & Defensive Testing: Coordinate and execute threat modeling and advanced security tests across our product and underlying infrastructure.\nLead Next-Gen Vulnerability Management: Drive triage and remediation using modern, risk-based principles like EPSS, while leveraging AI technologies to accelerate security testing at scale.\n Pioneer Security-as-Code: Design, implement, and automate security checks and guardrails (SAST, DAST, and secret scanning) directly into CI/CD pipelines.\nReview & Refine: Perform deep-dive code and configuration reviews, advocating for secure coding practices that support a proactive shift-left strategy.\nWhat you will need to succeed in this role:\nExperience: 5+ years of dedicated Security Engineering experience, ideally within a high-growth SaaS, E-commerce, or Fintech environment.\nSaaS Deep-Dive: The ability to dive deep into the business logic of a complex SaaS application to uncover and verify elusive attack vectors.\n Web and API Security Mastery: a deep understanding of web/API attack vectors and scalable best practices and how to run workloads securely in a cloud environment (k8s, AWS/GCP/Azure)\nOwnership: A proven track record of autonomously driving security initiatives from conception to completion.\n Automation Mindset: Proficiency in at least one programming language for scripting and security tool development (bonus points for automating GRC evidence collection).\n Education: A Bachelor’s or Master’s degree in Computer Science, Cybersecurity, IT, or a related technical field (or equivalent practical experience).Preferred:\n\nExperience navigating PCI DSS script security.\nA background in Red/Purple Team operations and advanced penetration testing, paired with the empathy and collaboration skills needed to help dev teams fix software vulnerabilities.\nHands-on experience with Terraform for securing infrastructure-as-code and integrating security testing.\nFamiliarity with our modern tech stack: GCP, Golang, and TypeScript.","description_format":"text","description_chars":4085,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Ticketing","Event Technology"],"lifecycle":[{"event":"open","at":"2026-09-04T20:53:47Z"}],"visa":[],"liveness":{"score":81,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.9,"p_room":0.9,"age_days":59,"expected_fill_days":92,"reasons":["conf:0","velocity","win:mid"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/vivenu-senior-security-engineer-appsec-dfm","json_url":"https://alion.io/job/vivenu-senior-security-engineer-appsec-dfm.json","meta":{"generated_at":"2026-11-03T08:04:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11533,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":39986},"rest":"https://alion.io/mcp/rest/get_company?id=39986"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvivenu-senior-security-engineer-appsec-dfm"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvivenu-senior-security-engineer-appsec-dfm"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvivenu-senior-security-engineer-appsec-dfm"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/vivenu-senior-security-engineer-appsec-dfm\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvivenu-senior-security-engineer-appsec-dfm"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":202967}},{"tool":"search_jobs","arguments":{"company":"vivenu.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":202967},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}