[Hiring] Senior Security Engineer @vivenu

Role Description

This isn't just a maintenance role – it is a blank canvas to build, scale, and architect a state-of-the-art AppSec program from the ground up. You will drive the entire AppSec lifecycle:

• Offensive red teaming
• Threat modeling
• Risk-based vulnerability management
• Pioneering a true shift-left culture

What Makes This Role Challenging and Engaging:

• High-Impact Technical Environment: Holistically influence a shift-left architecture across both application and platform layers.
• Modern Technology Stack: Secure a massive TypeScript monolith alongside Go supporting services.
• Web and API: Secure the application of the vivenu platform and its underlying API structure.
• Complex Multi-Cloud Architecture: Work in a sophisticated multi-tenant, multi-region environment spanning k8s and GCP.
• Cutting-Edge Deployment: Secure a next-gen Kubernetes "satellite architecture" utilizing hardened private compute nodes.

As a Senior Security Engineer - AppSec (d/f/m), your responsibilities will include:

• Be a Trusted Advisor: Partner closely with engineering teams to champion security-by-design.
• Offensive & Defensive Testing: Coordinate and execute threat modeling and advanced security tests.
• Lead Next-Gen Vulnerability Management: Drive triage and remediation using modern, risk-based principles.
• Pioneer Security-as-Code: Design, implement, and automate security checks and guardrails into CI/CD pipelines.
• Review & Refine: Perform deep-dive code and configuration reviews.

Qualifications

• 5+ years of dedicated Security Engineering experience, ideally within a high-growth SaaS, E-commerce, or Fintech environment.
• The ability to dive deep into the business logic of a complex SaaS application.
• A deep understanding of web/API attack vectors and scalable best practices.
• A proven track record of autonomously driving security initiatives from conception to completion.
• Proficiency in at least one programming language for scripting and security tool development.
• A Bachelor’s or Master’s degree in Computer Science, Cybersecurity, IT, or a related technical field (or equivalent practical experience).

Requirements

• Experience navigating PCI DSS script security.
• A background in Red/Purple Team operations and advanced penetration testing.
• Hands-on experience with Terraform for securing infrastructure-as-code.
• Familiarity with GCP, Golang, and TypeScript.

Benefits

• We scale sustainably on a profitable, VC-backed foundation.
• Collaborate with over 160 dedicated professionals from leading tech companies.
• A diverse, merit-driven team spread across six global offices.
• Ranked among the fastest-growing scale-ups in Europe.
• Work alongside some of tech’s brightest minds.

Company Description

Welcome to vivenu, the global leader in event ticketing tech and one of the world’s fastest-growing live entertainment tech firms. We are transforming event ticketing for global leaders like the Grammys, the Golden Globes, Stanford University, and the Hockenheimring.

With over 10 million end users and usage quadrupling annually, our infrastructure now handles over 1 billion requests per month.

Join us and build the future of live entertainment.