[Hiring] Senior Security Engineer - AppSec @vivenu

Role Description

This isn't just a maintenance role – it is a blank canvas to build, scale, and architect a state-of-the-art AppSec program from the ground up. You will drive the entire AppSec lifecycle:

• Offensive red teaming
• Threat modeling
• Risk-based vulnerability management
• Pioneering a true shift-left culture

What Makes This Role Challenging and Engaging:

• High-Impact Technical Environment: Influence a shift-left architecture across both application and platform layers.
• Modern Technology Stack: Secure a massive TypeScript monolith alongside Go supporting services.
• Web and API: Secure the application of the vivenu platform and its underlying API structure.
• Complex Multi-Cloud Architecture: Work in a sophisticated multi-tenant, multi-region environment spanning k8s and GCP.
• Cutting-Edge Deployment: Secure a next-gen Kubernetes "satellite architecture" utilizing hardened private compute nodes.

As a Senior Security Engineer - AppSec (d/f/m) your responsibilities will include:

• Be a Trusted Advisor: Partner closely with engineering teams to champion security-by-design.
• Offensive & Defensive Testing: Coordinate and execute threat modeling and advanced security tests.
• Lead Next-Gen Vulnerability Management: Drive triage and remediation using modern, risk-based principles.
• Pioneer Security-as-Code: Design, implement, and automate security checks and guardrails into CI/CD pipelines.
• Review & Refine: Perform deep-dive code and configuration reviews advocating for secure coding practices.

Qualifications

• 5+ years of dedicated Security Engineering experience, ideally within a high-growth SaaS, E-commerce, or Fintech environment.
• The ability to dive deep into the business logic of a complex SaaS application.
• A deep understanding of web/API attack vectors and scalable best practices.
• A proven track record of autonomously driving security initiatives from conception to completion.
• Proficiency in at least one programming language for scripting and security tool development.
• A Bachelor’s or Master’s degree in Computer Science, Cybersecurity, IT, or a related technical field.

Requirements

• Experience navigating PCI DSS script security.
• A background in Red/Purple Team operations and advanced penetration testing.
• Hands-on experience with Terraform for securing infrastructure-as-code.
• Familiarity with GCP, Golang, and TypeScript.

Benefits

• Sustainable Growth: Continuous investment in our people, products, and long-term vision.
• Top-tier Team: Collaborate with over 160 dedicated professionals.
• Global DNA: A diverse, merit-driven team spread across six global offices.
• Fast Growing: Consistently ranked among the fastest-growing scale-ups in Europe.
• Next-Gen Leaders & Insights: Work alongside some of tech’s brightest minds.

Company Description

Welcome to vivenu, the global leader in event ticketing tech and one of the world’s fastest-growing live entertainment tech firms. We are transforming event ticketing for global leaders like the Grammys, the Golden Globes, Stanford University, and the Hockenheimring.

Backed by over $65 million in funding, our platform empowers event organizers to own their brand experience, unlock deep data insights, and seamlessly integrate ticketing into their digital infrastructure.