Lead Security Engineer

As Lead Security Engineer in the Security Engineering team, you will shape how Scout24 secures the products people rely on for important life decisions, the cloud infrastructure behind them and our growing use of AI. This is a hands-on senior individual-contributor role without direct line-management responsibility.

What you'll do

• Own the technical direction and engineering outcomes for product, cloud infrastructure and AI security, helping shape the Security Engineering roadmap and priorities.
• Design, implement and evolve reusable controls, guardrails and security-as-code patterns across cloud, identity, containers, infrastructure as code and CI/CD.
• Lead threat modelling and security architecture reviews for high-impact products, platforms and AI-enabled capabilities, identifying risks early and defining practical mitigations.
• Create paved roads and self-service security capabilities that reduce developer friction and help engineering teams deliver securely by default.
• Use evidence and meaningful metrics to prioritise investments, demonstrate control effectiveness and communicate risk and trade-offs clearly.
• Be a trusted technical authority and escalation point: mentor engineers, challenge constructively and raise security capability across Scout24.

What you'll need

• A strong record of hands-on security engineering and technical leadership in a medium-to-large engineering organisation, with ownership of complex initiatives from direction through implementation.
• Deep expertise in application or cloud security, together with enough breadth across infrastructure, identity and data security to make sound end-to-end decisions.
• Experience building security controls for cloud-native environments, ideally AWS, including containerised workloads, infrastructure as code and CI/CD systems.
• Strong software engineering and automation skills. You are comfortable writing production-quality code or tooling using technologies such as Python, Terraform or comparable alternatives.
• Practical experience with threat modelling, secure architecture and embedding security throughout the software development lifecycle.
• Excellent judgement and communication: you can turn ambiguous risks into clear decisions, balance security with customer and operational impact, and influence without relying on formal authority.

Nice to have

• Hands-on experience securing AI-enabled products, LLM applications, agents, machine-learning platforms or their supporting data pipelines.
• Experience with Kubernetes and modern application, cloud or software-supply-chain security tooling.
• Experience leveraging AI tools to drive problem-solving and productivity, maintaining effective human oversight and judgement.

What they offer

• Competitive salary package and bonus
• Hybrid work model with three days on-site per week and 30 days vacation per year
• Dedicated learning time, online courses and structured feedback for career development
• Relocation support with visa assistance and relocation package
• Modern Berlin office with gym, napping room, rooftop terrace and latest technical tools
• Pension scheme with company subsidy and health benefits including life coaching