IT Security/ Cyber Security Expert (F/M/D)

Who We Are

We know what it takes to turn dreams of the digital future into products that people love. Finding, developing and accelerating new digital businesses: we aim for the best technological solution to develop unique products and services for Porsche customers and beyond. We aim to find and scale new digital business models as well as optimize existing products.

We, Porsche Digital, are a 100% subsidiary of Porsche. This means we are driven by passion, we are committed to learning and improving, and we believe in teamwork and respect as the key to creating a great Porsche experience for the customer and our team.

YOUR WORK ENVIRONMENT

W're looking for a Security Architect to join our international application security team , which advocates and enforces cybersecurity best practices, requirements and solutions to our international product development teams.

You will be a fundamental member of an experienced team that is taking guidance of all application security topics including moderating and training within our security related community of DevSecOps and/or Security Champions to align with all other teams in order to achieve their objectives.

What Your Tasks Are

• Actively contribute to the development of secure products by guiding our software engineers and product owners
• Continously improve our software development guidelines and framework globally
• Consult our products teams in risk assessments, vulnerability scans and penetration tests
• Push and strive for secure products without compromising quality and functionality
• Conduct, plan and supervise the execution of penetration tests of our products
• Mentor even experienced software engineers on security-relevant topics in their code
• Enhance our security community by moderating and training our DevSecOps
  
  
  

What You Bring Along

• Degree in computer science or equivalent
• 3+ years professional experience in areas of IT security
• Solid knowledge of software security standards, threat assessment and secure programming methodologies
• Solid knowledge of modern cloud-native architectures and their deployments (preferably AWS & CloudFoundry)
• Ability to adapt to cross-functional teams and new ways of working
• Knowledge and experience working in agile teams
• Strong communication skills
• A valid Spanish work permit or EU citizenship
  
  
  

IT WOULD BE GREAT IF YOU ALSO HAD

• Knowledge in OWASP, NIST and/or other securitxy frameworks
• Experience working with at least few of these: Javascript, Typescript, Node.js, Java, Kotlin, Spring Boot, Python
• Knowledge in authentication methods (JWT, OAuth 2.0, API Gateways)
• Experience in network security and IAM configuration (preferably on AWS)
• Knowledge in Infrastructure as Code
• Ideally experience in the conception and rollout of an ISMS
• Fluent in English and German
  
  
  

What We Offer 

• Full time permanent contract
• Competitive salary
• 26 days paid vacation
• Flexible working model (you and your team decide when to be in the office) 
• Free coffee, tea, fruits, drinks, yogurt, bread at our office canteen 
• No dress-code, pick the outfit that makes you feel comfortable 
• Access to our corporate benefits
• Personal growth budget
• The possibility to make a real impact 
  
  
  

Before you apply: 

We are a very flexible company and work on a hybrid mode. We are excited to welcome individuals who are passionate about their work and eager to join our team in Barcelona. Therefore, we kindly request that all applicants either currently reside in Barcelona or are open to relocating for this position. We believe that Barcelona is a vibrant and beautiful city, and we are looking forward to welcoming new team members who share our enthusiasm for the city and the work we do here. 

What Comes Next

If you've made it this far, don't keep us waiting. Get started - apply directly!

In the meantime: check out our new Porsche Digital Website to get an impression of what our hearts beat for:  https://bcn.porsche.digital/

We are looking forward to every single application that reaches us, because diversity is just as important as the energy that flows through our veins.