Are you interested in web and mobile applications and want to get security for them on the next level while working with a very modern technology stack in a truly international company? – join us!
Responsibilities and Tasks
As our Platform Security Lead within the CISO Department, you become an important part of our company. There you will work as a Platform Security Lead for our customer facing Web&Mobile platform.
As Platform Security Lead, make an impact at Hapag-Lloyd by
- Advising on innovative security solutions for Hapag-Lloyd
- Advising on the centralization of our security controls
- Working closely with our other Security Experts of the CISO department
- Conducting and facilitating security reviews
- Being the First Point of Contact for almost all security-related topics. The platform security lead will act as the conduit to expertise available within the CISO department
- Formally assessing information security risks related to solution / business projects, determining the potential impact of those risks, and conducting follow-up, throughout the project lifecycle, on any necessary remediation efforts
- Working hand-in-hand with DevOps teams (developers, architects, product owners, business) to serve the platform’s requirements and CISO requirements to ensure that the security posture is in line with the risk appetite and threat landscape
- Developing a specialized knowledge of and key relationships with the platform, ensuring that security is imbedded in the platform and that its security needs are being met
- Collaborate with other team members to identify opportunities for implementing common security solutions
Tech stack
You will work with
- Scala
- Vue.js
- Typescript
- Quasar
- Cloudflare
- AWS CloudFormation
- AWS Lambda
- Lots of other AWS Services
Requirements and Qualifications
At Hapag-Lloyd, you’ll be working for one of the leading shipping companies in the world. You are bursting with the ambition to keep up with us. And specifically for this vacancy as a Platform Security Lead for the CISO department, you are skilled at communication, presentation and stakeholder management. You supplement these skills with
- Master’s or Bachelor’s degree or equivalent technical training in Information Technology, Information Systems Security, Cybersecurity, or related field.
- Experience with security architectures such as cloud, mobile, enterprise, web and app security architecture.
- Experience with security tests in place to fight off things like code execution, SQL injection and cross site scripting.
- Experience with security in cloud computing and microservices architecture.
- Minimum 4 years of relevant IT and Information Security experience and you can act independently with minimal supervision.
- Familiarity with security-related legal and regulatory requirements.
- Demonstrate specialized knowledge in web application security and mobile application security, including data protection methods, and as required, share this expertise with other team members to facilitate ongoing activities.
- Be a generalist specialist with a good breath of knowledge across several of security with deep expertise in 2 or 3 areas.
- Good level in English
German language expectations: We expect all international candidates to be willing to learn at least the basics of the German language in case they are accepted for the position. This will enable you to participate in social and community life in Germany and at our company premises in the best possible way.
What we offer
- Dynamic and modern working atmosphere in a newly renovated, modern office in the heart of Hamburg’s city center
- At least 28 days of vacation, flextime, capital-forming benefits, hybrid work model
- Subsidy for public transportation
- Bike leasing for all positions
- Restaurant and coffee bar
- Health and company sports programs (e.g., yoga, sailing, fitness courses, and much more)
- Corporate volunteering cooperation with purpozed.org
#hapaglloyd
Save time with your application and send us only your CV for now. You can easily apply online by using our application tool.
We kindly ask recruiters and employment agencies to refrain from sending us unsolicited profiles and CVs of potential applicants for this or other positions advertised on our website.
