SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Capmo is a fast-growing B2B SaaS platform that digitizes construction project management, serving thousands of project managers across Europe. The company enables architects, engineers, and contractors to collaborate efficiently on over 100k projects annually.
As a Senior Security Engineer, you will own security across the full stack—product, cloud infrastructure, and internal IT. Your responsibilities include:
**Product & Cloud Security:** Lead threat modeling, security code reviews, and secure-by-default architecture patterns. Own the CI/CD security tooling (SAST, dependency scanning, container scanning, secret detection) to prevent vulnerabilities from accumulating.
**AWS Infrastructure Hardening:** Design and implement IAM architecture, network segmentation, encryption, logging, and workload security. Encode security baselines as policy-as-code rather than documentation.
**Detection & Response:** Build the company's incident detection and response capability from the ground up. Serve as the technical lead during security incidents—from detection through containment and post-incident review.
**Vulnerability Management:** Own the vulnerability disclosure and penetration testing programs. Drive remediation with product teams proactively rather than through ticket-based workflows.
**Internal IT Security:** Secure the internal landscape across both Munich and Berlin offices, including endpoint management (MDM/EDR), identity infrastructure (SSO, MFA, least privilege), and office networks.
**Compliance & Customer Trust:** Support ISO 27001, SOC 2, and GDPR compliance with real technical controls and evidence. Assist Sales with customer security reviews.
You will shape Capmo's security direction as a hands-on senior individual contributor, building guardrails that engineers adopt because they're effective, not because they're mandated. The role offers equity participation through an employee stock option program and an annual development budget of €1,000.
