{"id":3744050,"url":"https://alion.io/job/zalando-principal-security-engineer-all-gender","title":"Principal Security Engineer (All Gender)","company":{"id":2820183,"name":"Privé by Zalando","domain":"zalando-prive.fr","url":"https://alion.io/company/zalando-prive","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Career sitemap","truth_index":{"grade":"A","score":95,"open_postings":117,"ghost_share":0.009,"stale_share":0,"repost_share":0.615,"time_to_fill_p50_days":8,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Berlin, Germany"],"countries":["DE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":true,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"GPG","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false}],"status":"closed","first_seen_at":"2026-11-04T12:32:29Z","employer_posted_date":"2026-11-08","last_verified_at":"2026-11-09T17:03:07Z","board_verified":false,"closed_at":"2026-11-09T17:03:07Z","days_open":5,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":4},"description":"THE ROLE & THE TEAM\nWe are seeking an experienced, high-impact Principal Security Engineer to join our Operational Security (OpSec) function as an individual contributor to lead our technical security strategy and regulatory compliance posture across our e-commerce and financial technology systems.\nIn this role, you will bridge deep software engineering and technical system design with regulatory compliance and governance (e.g., DORA, PCI-DSS, ISO 27001), operational resilience and cross-departmental alignment. You will serve as the primary technical authority on complex security architectures, change management guardrails, overall security posture and risk assessments for critical financial and cloud infrastructure.\nWHAT WE’D LOVE YOU TO DO (AND LOVE DOING)\nSecurity Architecture & Technical Change Governance\nSystem Design & Reviews: Function as the technical security reviewer and gatekeeper for high-criticality architecture changes. Strong understanding of network and application security, cryptographic primitives and identity and access management.\nSecure Engineering Standards: Maintain and enforce baseline configuration standards across cloud, server, and endpoint assets and secure Software Development Life Cycle (SDLC) practices.\nFinancial & Regulatory Compliance\nRegulatory Compliance: Direct technical alignment with regulatory standards including DORA, PCI-DSS, ISO 27001, and local regulatory frameworks. Improve the effectiveness of the ISMS and manage ICT risks from the Operational Security domain.\nThird-Party & Data Transfer Security: Evaluate security posture, CIA requirements, and Service Level Agreements (SLAs) for critical ICT outsourcing services and payment partner integrations.\nRisk Management: Familiarity with vulnerability management concepts and risk management methodologies.\nTechnical Leadership & Cross-Departmental Strategy\nMulti-Team Scope: Drive system designs and technical strategies spanning cross-functional multiple teams (engineering teams, product managers, and principal engineers), business units, and corporate entities (e.g., aligning Zalando Payments infrastructure with central Zalando Group tech).\nStakeholder Management: Foster a Security first culture across departments, and bridge the gap between core engineering teams and information security operations.\nWE’D LOVE TO MEET YOU IF\nExperience: 8+ years of technical security engineering experience, with demonstrated impact at a Principal / Lead level across multi-team or department-wide scopes.\nRegulatory & Compliance Mastery: Deep technical understanding of DORA, PCI DSS, ISO 27001, and ICT risk management frameworks. Experience in financial services, payment processing, or highly regulated e-commerce environments.\nSystem Design & Cloud Security: Proven track record in securing cloud-native microservices, web application firewalls (WAF), and supply-chain/CI-CD pipeline security.\nCryptography & Data Protection: Strong foundation in transport and storage encryption standards, tokenization, PGP/GPG key management, and data classification guidelines.\nCommunication & Stakeholder Management: Exceptional capability to articulate complex technical security risks to executive leads, auditors, and engineering teams.\nOUR OFFER\nZalando provides a range of benefits, here’s an overview of what you can expect. Ask your Talent Acquisition Partner to learn more about what we offer.\n27 days of holiday a year to start for full-time employees (+1 day for every calendar year up to 30 days)\n40% off fashion and beauty products sold and shipped by Zalando, 30% off Lounge by Zalando, discounts from external partners\nFamily support, including counselling and dedicated services for parents and carers\nCompany pension scheme\nEmployee shares programme\nHealth and wellbeing options, including Wellhub\nMental health support and coaching\nDevelopment through our training platform and biannual peer-to-peer review\n2 paid volunteering days a year\nRelocation assistance (subject to prior agreement)\nINCLUSIVE BY DESIGN\nIf you think you have what it takes, we encourage you to apply even if you don't meet every single requirement. You may just be the right candidate for this or other roles!\nAt Zalando, our vision is to be the leading European technology platform for fashion and lifestyle - one that thrives on diversity and is truly inclusive by design. We believe that diverse teams fuel innovation and creativity, and we actively seek out talent from all backgrounds.\nWe actively seek to reduce bias in our hiring and employment processes, focusing on your qualifications, skills, and contributions. To support this, we kindly ask that you refrain from including personal details such as your photo, age, or marital status in your CV, ensuring a fair and equitable evaluation based solely on your abilities and potential.\nWe are committed to providing an exceptional and accessible candidate experience for everyone. If you require any accommodations to support you throughout the hiring process, please let us know - we are here to assist you.\nDiscover more about our commitment to creating a diverse and inclusive workplace: https://jobs.zalando.com/en/our-culture/diversity-and-inclusion","description_format":"text","description_chars":5208,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Paid volunteering days","Relocation assistance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["Commerce"],"lifecycle":[{"event":"open","at":"2026-11-04T12:32:29Z"},{"event":"reopen","at":"2026-11-08T06:00:01Z"},{"event":"close","at":"2026-11-09T17:03:07Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/zalando-principal-security-engineer-all-gender","json_url":"https://alion.io/job/zalando-principal-security-engineer-all-gender.json","meta":{"generated_at":"2026-11-10T14:31:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33682,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2820183},"rest":"https://alion.io/mcp/rest/get_company?id=2820183"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzalando-principal-security-engineer-all-gender"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzalando-principal-security-engineer-all-gender"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzalando-principal-security-engineer-all-gender"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zalando-principal-security-engineer-all-gender\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzalando-principal-security-engineer-all-gender"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3744050}},{"tool":"search_jobs","arguments":{"company":"zalando-prive.fr","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3744050},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}