Security Engineer in Bochum bei SonarSource

Sonar solves the trillion-dollar challenge of bad code. Sonar equips organizations to achieve and sustain a Clean Code state by empowering developers to write consistent, intentional, adaptable, and responsible code. Clean Code produces software that is maintainable, reliable, and secure, allowing development teams to spend less time fixing issues and more time innovating. With Sonar, and by employing the company’s Clean as You Code methodology, organizations minimize risk, reduce technical debt, increase productivity, and derive more value from their software in a predictable and sustainable way.

Sonar’s open-source and commercial products – SonarLint, SonarCloud, and SonarQube – support over 30 programming languages, frameworks, and infrastructure technologies. Trusted by more than 500,000 organizations and used by more than 7 million developers globally to clean more than half a trillion lines of code, Sonar is integral to delivering better software.

The impact you will have

Our primary goal is to build trust with our rapidly growing customer base by ensuring the security of our products and demonstrating that our organization meets stringent security standards.

As a member of the Information Security Team, you will work with the engineering teams to ensure products and cloud platforms are designed, built, and maintained to our high-security standards and assist them through constant improvement. You will also ensure endpoints are fully secure and meet our engineers' needs while procuring and deploying new solutions. You will investigate and resolve security issues raised with our team. As part of a team-based organization, your contributions will significantly impact the growth of our business through Sonar’s “collective intelligence” mindset.

On a daily basis, you will

• Work with the engineering teams to design and implement security solutions
• Investigate and resolve security issues
• Run internal and external security reviews and pen-testing campaigns
• Review engineering product architecture and solutions to ensure integration of security requirements
• Investigate and manage CVE and cloud platform configuration
• Manage and adjust cloud networks and firewalls
• Procurement, design, and implementation of new security solutions and features
• Develop and improve security solutions and tools for cloud platforms and end-point controls such as admin, malware, DLP, private browser, VPN, and hardening.

The technical skills you will demonstrate

• Extensive experience with AWS architectures, services, and security including IAM Access Analyzer
• Extensive experience with CI/CD platforms
• Experience with application security assessment methods and reviews including authentication and authorization.
• Pen-Testing experience
• CVE investigation and management
• End-point security such as CrowdStrike and CyberArk
• Cloud network and firewall management
• Azure and GCP platform experience is a plus.

The soft skills you will demonstrate

• You are a curious person by nature
• You are a friendly, enthusiastic, and organized team player.
• You actively share your knowledge and give and receive feedback, to improve the team and yourself.
• Ability to clearly identify the problem to be solved and articulate it before working on the solutions.
• You have experience working on cross-team projects across a global organization.
• You are fluent in English, both written and spoken.

Why you will love it here

What we do

As Home of Clean Code, Sonar is the ultimate solution to achieving Clean Code for developers and organizations alike.