Secure Software Development Specialist (f/m/x)

Description

The team sits within the technology centre of a large bank in Central and Eastern Europe. The Bucharest centre was set up in 2013 and has delivered global technology products and services, playing a major part in the bank's technology transformation.

Engineers here work in a practical, learning-focused culture built on knowledge sharing and skill growth. The team builds applications for many important business areas across the bank.

The role supports a shift-left approach that moves security responsibility to the people building software and to the earliest stage of development. You will define the secure coding standards and keep the guidance and best practices current at several levels, so developers can use them easily while meeting external and regulatory expectations.

Responsibilities

• Keep the secure coding standards up to date, including secure code snippets as good practice examples.
• Extend security guidance documents and wiki pages to cover engineering languages, architectures and frameworks.
• Prepare and deliver training, and work with the engineering community.
• Show development communities how to build security into software, with concrete patterns.
• Work with subject matter experts and communities of practice across the bank, including the Community of Security Champions, to teach them about security risks and mitigations.
• Keep learning about security standards and technologies, including AI security, and turn what you learn into awareness material for engineers.
• Join threat modelling sessions to help application teams spot threats early and address them at the design stage.

Requirements

• Working knowledge of security standards such as ISO 27001, the OWASP Top 10 (for example encryption, security certificates, authentication and authorisation, and configuration) and STRIDE.
• A sound understanding of the software development lifecycle and the tools developers use.
• A strong application security mindset and a willingness to spread security awareness across teams.
• Ability to work with many teams and persuade developers to put security into their everyday work.
• Proven experience using AI tools to raise productivity and streamline workflows, with the judgment to use data and AI output responsibly and ethically.
• Experience in software development and coding, for example in Java and its frameworks, is a plus.

Conditions

The role is based in Bucharest and follows a hybrid model with 40% remote work.

Flexible working hours are available.

You receive 24 days of holiday, loyalty days, and bank holidays, with weekday substitutes for bank holidays that fall on a weekend.

The company welcomes applications from all people and works to keep the environment fair and inclusive.

Benefits

• Competitive income and performance-based promotions.
• Private healthcare and life insurance with premium options for you and discounts for your family, plus check-ups and support for healthier ways of working.
• Support through personal crises, illness and mental health, with an open culture around mental health.
• Coaching and support from team experts in a continuous learning environment.
• A modern office with relaxing and social areas.
• Meal vouchers and bonuses for referrals.
• Retailer discounts, cultural and CSR activities, and workshops.