Dein persönlicher KI-Karriere-Agent
Assessing AI systems and SDLC security for a financial market infrastructure provider. Software engineering background and ability to read code required. Operational resilience strategy implementation, Shift Left security practices.
Deine Match-Analyse
Warum dieser Job zu dir passt
Mögliche Lücken
Tipps für deine Bewerbung
Anforderungen
- Software engineering or computer science background
- Developed and shipped software
- Ability to read code
- Understanding of CI/CD pipelines
- At least 2 years of professional experience in product delivery, DevOps, or related engineering field
- Genuine interest in application security, cloud security, or secure development practices
- Picked up security concepts through engineering work
- OWASP knowledge
- CTF participation
- Open source security contributions
- Hands-on use of security tooling (SAST/DAST, container security, SBOM)
- Ability to assess criticality without formal framework
- Clear communication to technical and non-technical audiences
- Experience in agile environment (SCRUM, Kanban, OKRs)
- Knowledge of cloud security (GCP or Azure)
- Knowledge of regulatory frameworks (DORA, EU AI Act, CRA)
- Knowledge of security certifications (AWS/GCP Security, OSCP, or equivalent)
- Proficiency in written and spoken English
- German language skills are an asset
Aufgaben
- Assess and challenge the security of AI systems
- Assess and challenge the security of software development pipelines
- Translate engineering background into risk-relevant insights
- Drive the resilience strategy operationally
- Implement Shift Left security practices
- Implement Shift Down platform security
- Implement Shift Down OSCAL practices
- Implement Shift Down infrastructure-as-code
- Implement Shift Down Terraform practices
- Implement Shield Right vulnerability management
- Implement Shield Right patching
- Implement Shield Right 1D1D
- Collaborate with the Head of ICT Risk
- Assess AI systems in trading, clearing, and risk environments
- Assess Cloud systems in trading, clearing, and risk environments
- Assess AI-specific risks like adversarial ML
- Assess AI-specific risks like prompt injection
- Assess AI-specific risks like data poisoning
- Assess AI-specific risks like uncontrolled agent behaviour
- Prepare content for management bodies
- Prepare content for supervisory bodies
- Evaluate the maturity of the Secure Software Development Lifecycle (SSDLC)
- Challenge security controls in CI/CD pipelines
- Challenge SAST security controls
- Challenge DAST security controls
- Challenge SCA security controls
- Challenge container scanning security controls
- Support the SQUARE initiative with technical assessments
- Conduct crypto inventory assessments
- Evaluate NIST PQC standards
- Assess migration readiness of systems
- Assess migration readiness of pipelines
- Conduct DORA-compliant application risk assessments
- Manage observation tracking with first-line teams
- Manage remediation follow-up with first-line teams
- Support internal audits
- Support regulatory audits
- Contribute to EU AI Act implementation
- Act as a second-line function towards product teams
- Act as a second-line function towards 1LoD
Berufserfahrung
Ausbildung
Sprachen
Tools & Technologien
Von Nejo automatisch aufbereitet
Nejo hat diesen Job automatisch von der Website des Unternehmens Deutsche Börse erfasst und die Informationen auf Nejo mit Hilfe von KI für dich aufbereitet. Trotz sorgfältiger Analyse können einzelne Informationen unvollständig oder ungenau sein. Bitte prüfe immer alle Angaben in der Originalanzeige! Inhalte und Urheberrechte der Originalanzeige liegen beim ausschreibenden Unternehmen.
Zur Originalanzeige bei Deutsche BörseÜber das Unternehmen
The company is a leading clearing house for energy and commodity products in Europe, ensuring secure transaction settlements.
Nejo bewertet ihn, und bringt ihn danach gemeinsam mit dir in Bestform.
Noch nicht perfekt?
- Deutsche Börse GroupCybersecurity Innovation & Agile Specialist (m/w/x)Vollzeitnur vor OrtBerufserfahrenFrankfurt am Main
- Deutsche BörseICT Risk Solution Architect (m/w/x)Vollzeitnur vor OrtSeniorFrankfurt am Main
- Deutsche BörseSenior Specialist: IT Audit & Cyber Risk (2nd Line) (m/w/x)Vollzeitnur vor OrtSeniorFrankfurt am Main
- Deutsche BörseHead of Group Risk Resilience (m/w/x)Vollzeitnur vor OrtSeniorFrankfurt am Main
- FiservICT Risk Officer (m/w/x)Vollzeitnur vor OrtBerufserfahrenBad Homburg vor der Höhe