Principal Software Security Officer (mfd)

Define the standards. Challenge the risks. Strengthen our software security.

Secure software does not happen by accident.

At GieseckeDevrient Currency Technology we develop technologies and solutions that help create trust worldwide. From digital products and manufacturing systems to complex software platforms operating in highly sensitive environments security is not an add-on. It is a fundamental requirement.

Thats why were looking for someone who thinks about software security holistically. Someone who doesnt just identify risks but establishes standards. Someone who empowers teams to build secure software. Someone who sees security as an enabler of innovation rather than a barrier to it.

As a Principal Software Security Officer you will be part of our multidisciplinary Global Security organization. Operating independently from development teams you will help shape the future of secure software development across GD.

Your Mission

You will own the governance and continuous evolution of our Secure Software Development Lifecycle (SSDLC).

Working closely with engineering architecture product management and security teams you will ensure that Security by Design becomes an integral part of the entire software lifecycle.

• Establish evolve and oversee our Secure Software Development Lifecycle (SSDLC)
• Define software security standards policies and processes across the organization
• Advise development and architecture teams on Security by Design principles
• Conduct threat modeling exercises risk assessments and security reviews
• Assess software architectures APIs cloud solutions and integration concepts from a security perspective
• Embed security requirements into development processes CI/CD pipelines and release workflows
• Define and oversee security gates and security acceptance criteria
• Evaluate third-party software open-source components and software supply chains
• Support security testing vulnerability management and risk remediation activities
• Coach and mentor developers architects and Security Champions on secure development practices
• Contribute to audits supplier assessments and customer-facing security assurance activities
• Assess emerging technologies cloud services and AI-assisted software development from a security perspective

• Degree in Computer Science Information Security Software Engineering or a comparable qualification
• Experience in software engineering software architecture application security product security or a related technical field
• Genuine interest in secure software development and modern software architectures
• Knowledge of secure software development practices including SSDLC threat modeling secure coding security testing and vulnerability management
• Understanding of cloud security and DevSecOps principles
• Familiarity with industry standards and frameworks such as OWASP SAMM OWASP ASVS NIST SSDF IECOWASP Top 10 and CWE
• Strong analytical thinking and a structured approach to problem solving
• Excellent communication skills with the ability to collaborate effectively across diverse teams and stakeholders
• Ability to translate complex security concepts into practical and business-oriented solutions
• Collaborative mindset with a passion for driving security excellence across the software development lifecycle
• Strong written and spoken English skills
• Curiosity continuous learning and enthusiasm for staying up to date with evolving security trends and technologies
• Motivation to make a meaningful impact by helping teams build secure and resilient software products across the organization

Why This Role Is Different

This position combines technical depth strategic influence and meaningful impact.

You will become part of a global security organization and help shape how secure software development is implemented across an international technology company.

Your influence will extend across digital products internal applications and complex software supply chains.

You wont be working on just one project.

You will help define the security standards for an entire organization.

We believe in potential not checklists.

If this role excites you wed love to get to know you.

$$ We are an equal opportunity employer! We promote diversity in all its forms and create an inclusive work environment free from prejudice discrimination and harassment in which all employees feel a sense of belonging. We warmly welcome all applications regardless of gender age race or ethnic origin social and cultural background religion disability and sexual orientation.

$$null$$ Experience:

Staff IC