Software Security Architect/Engineer (m/f/d)
Shape the digital future with us as a Software Security Architect/Engineer!
We develop tailored enterprise solutions for our customers using modern technologies and AI—from the initial idea through to operations. Your contribution directly impacts the success of our projects.
We are the S&N Group —a team of IT professionals passionate about developing software, shaping projects, and driving innovation. Whether consulting or development, AI, Java, or SAP—we bring technology, team spirit, and ideas together. We advise and support our customers in banking and public administration throughout every phase of digital transformation.
And we are looking for you as a Software Security Architect/Engineer (m/f/d).
What I like about S&N: being able to work autonomously, the open-door policy, and direct contact with the customer.
Christian
Your responsibilities
- As a Software Security Architect/Engineer, you embed security in the architecture: you derive security requirements from business objectives, establish Security-by-Design principles, and document and represent architectural decisions.
- Methodical threat modeling: systematically identify threats, abuse paths, and risks; derive and prioritize risk treatment.
- Secure Software Development (SSDLC): integrate security throughout the development lifecycle—from requirements, design, and implementation through testing to operations (shift-left, automated checks, Definition of Done/Ready).
- Cryptography & post-quantum readiness: assess cryptographic decisions, ensure crypto agility, and prepare roadmaps for post-quantum migration (e.g., hybrid approaches, key/certificate lifecycle).
- Architecture reviews & guidance: conduct design and code reviews with a security focus, curate patterns & anti-patterns, and develop reference architectures and guardrails.
- Business context & governance: translate security requirements into business value (risk/cost-benefit trade-offs), define security KPIs/OKRs, and align with compliance/data protection.
- Enablement & leadership: provide technical leadership in cross-functional teams, coach engineers/architects, and prepare knowledge for the company’s projects.
Your profile
- Several years of experience in software/solution architecture or application security, with demonstrable depth of conceptual work.
- Security-by-Design & SSDLC: confident with principles such as OWASP, least privilege, defense in depth, fail-secure, secure defaults; creating security requirements, policies, and acceptance criteria.
- Threat modeling & risk analysis: routine with structured approaches (e.g., scenario- or component-based), deriving technical and organizational measures.
- Secure coding practices: solid understanding of typical vulnerability classes and practical countermeasures.
- Cryptography expertise: understanding of modern methods, key/certificate management, PQ risks/migration paths; ability to plan crypto-agnostic interfaces and services.
- Architecture patterns: experience with service-oriented and event-driven architectures, asynchronous communication, robustness/resilience patterns, and secure integration scenarios.
- Leadership & communication: ability to facilitate decisions, provide technical leadership (even without disciplinary authority), and deliver clear decision proposals—from engineering to management.
What we offer you
Of course, we offer the classics such as mobile working, bonuses, incentives, drinks, fruit, snacks, etc. BUT also much more:
- Working time models tailored to your life situation, sabbatical, time instead of money
- Childcare subsidies, company bike leasing, Work-Life-Balance Bus, special payments, and much more.
- Plenty of individual, personal, and up-to-date training opportunities via our S&N Academy. In addition to courses, you also get access to entwickler.de and coursera.org, Red Hat trainings, etc.
- Strong focus on tailored onboarding, incl. a personal mentor. Respectful collaboration and working as equals—of course, all the way up to management level.
- Appreciative planning of your personal career path through regular feedback meetings
- Internal knowledge sharing through Friday talks on current topics, as well as projects within S&N Group competency management to explore new methods and technologies
Would you like to learn more? Then let’s talk.
S&N INVENT
As the largest company within the S&N Group, we combine expertise in custom software development and support companies from banking, public, and industry throughout the entire software lifecycle – from business analysis to operations.
Apply Now
