D

Senior Product/Application Security Engineer

distribusion • Germany
Remote
Apply Now

Build Distribusion's application security practice from the ground up for a high-risk, partner-facing API and payment surface. Lead threat modeling, secure design reviews, CI/CD security gates, vulnerability management, and cloud security implementation. Requires 5+ years in product/application security, production coding ability, deep web/API and cloud security knowledge, and hands-on CI security tooling experience.

Key Highlights
Build AppSec practice from the ground up
Own secure development and security gates
Manage vulnerabilities end to end
Implement GCP and WAF security controls
Scale security reviews across engineering squads
Key Responsibilities
Lead threat modeling and secure design reviews for high-risk changes, partner integrations, and payment flows.
Implement, tune, and enforce security gates in GitLab CI/CD (SAST, SCA, secrets scanning, and DAST) while minimizing developer friction.
Act as the primary technical owner for triaging, reproducing, and prioritizing findings from bug bounties, partner pentests, and automated scanners.
Work hands-on with the DevOps team to implement GCP organizational policies, IAM least-privilege architectures, and Cloud Armor (WAF/rate limiting).
Establish a security-champions network across engineering squads and leverage automation/AI-assisted tooling to scale code reviews effectively.
Own vulnerability management end to end: a risk-ranked backlog, remediation SLAs, an escalation path, and closing findings together with the teams.
Scope and coordinate the annual external penetration test and produce secure-development evidence for PCI-DSS and ISO 27001.
Technical Skills Required
Python Go GCP
Benefits & Perks
Competitive salary
Flexible remote work
International opportunities
Nice to Have
Experience securing high-volume, multi-tenant B2B APIs
Utilizing AI tooling to accelerate triage and review

Job Description

Distribusion

Distribusion is the world’s leading ground transportation marketplace and gives travellers seamless access to ground transportation online, from search to ticket purchase. We have built a cutting-edge B2B technology platform that connects bus, rail and ferry operators in 70+ countries with the biggest online retailers including Google Maps and Booking.com.

Want the full job description? Read the complete details on LinkedIn, the original posting.
Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.

See Jaabz jobs first on Google 1 tap · free · in AI Overviews Jaabz is on your Google Manage Preferred Sources
Keep exploring

Similar Jobs

Explore other opportunities that match your interests

N8N

Germany

Security Engineer

Cyber Security Full-time 3d ago

  • AI
  • Cloud
  • Identity And Access Management
  • Incident Response
Visa Remote

Remote Work Guides

Practical guides for finding and thriving in remote roles.

Browse all articles

Subscribe to our newsletter

New visa sponsorship, relocation and remote tech jobs, delivered to your inbox.