Staff Security Engineer

At PPRO, our mission is to simplify access to local payment methods and our vision is to enable the sale of goods and services to anyone in the world using their preferred way to pay. We empower partners such as Ant Group, PayPal and Stripe to access new markets, connect with more customers, and accelerate their growth.

Our strength lies in our diverse global team with 50+ nationalities and 10+ international locations- all united around one goal – to deliver the best possible products and services to our partners and customers. While our company mission is to keep innovating global commerce, our internal mission is to #chooseaction, #beopen, #thinkcustomer, #gofurther and #wintogether

The Purpose

At PPRO, Senior Software Engineers (m/w/x) make some of the most significant decisions for the company. Think of yourself as an important contributor to the success of your team, with a significant impact on the team’s product, but also on its culture and spirit.

The Transaction Processing - Gateways team in Berlin is in charge of building, enhancing and maintaining payment processing products, with PPRO Global processing gateway as the core platform. The team needs to ensure the platform is continuously fully-featured, scalable, reliable, cost-efficient, secure, and auditable while discovering new ways to reduce the integration efforts from customers and reduce the time to enable new payment methods.

What you’ll do

• Act as technical lead for the Security Engineering team, setting technical direction and coaching and mentoring engineers.
• Serve as the external interface for the team, partnering with Engineering and Product teams to unblock them and embed security into all stages of the software development lifecycle.
• Design and build reusable Security as Code artifacts and patterns that reduce developer friction while improving security outcomes.
• Own the security of our cloud environment across AWS and GCP: conduct risk assessments and architecture reviews, design secure solutions, and write hardening standards and security guidelines.
• Maintain and expand our Infrastructure as Code codebases and CI/CD pipelines, and develop automations for cloud security posture management (CSPM) and our Cloud Native Application Protection Platform (CNAPP).
• Conduct threat modelling across applications, services and cloud systems, and create detection rules for our SIEM.
• Provide expert application, product and cloud security guidance, and drive security assessments and penetration testing initiatives.
• Establish and share security standards and best practices across teams, consulting stakeholders and making data-driven decisions.
• Explore how AI can solve security problems, and drive proactive improvements from emerging security trends and technologies.

What we look for in you

• Results-oriented, highly collaborative, pragmatic and proactive, and with a continuous improvement mindset.
• A natural technical leader: able to guide, coach and mentor engineers, lead cross-team collaborations, and act as a trusted interface between security and the wider engineering organization.
• Strong interpersonal and communication skills, able to unblock teams and foster security awareness throughout the company.
• Deep experience across both application/product security and cloud security, with a strong background in software development.
• Experience designing and building scalable security controls, architecture and services, taking strategic decisions and having a wide impact.
• Strong expertise in cloud (preferably AWS, and GCP) and container security (Kubernetes, Docker).
• Deep understanding of DevSecOps and CI/CD security controls, with hands-on experience in Infrastructure as Code (preferably Terraform), CI/CD pipelines (preferably GitHub Actions) and scripting (Python, bash).
• Fluency with AI coding tools and curiosity about applying AI to security problems.
• Developer mindset and empathetic approach to find innovative “win-win” solutions.
• Security qualifications a bonus.
• Excellent communication and collaboration skills and fluent proficient in English.

If you’re passionate about security and eager to make a significant impact in a fast-paced environment, we’d love to hear from you!