Senior Security Engineer (all genders)

Your role Capmo is the digital partner on construction sites, with over 100k projects delivered faster and more successfully with the help of our platform. We enable architects, engineers, project managers and contractors to collaborate efficiently and run lean and optimized projects. We are one of the fastest-growing B2B SaaS companies in Europe and stay true to our mission of making hard things in construction feel easy. Thousands of project managers run their construction sites on Capmo every day — which means our customers trust us with data that is critical to their business. Keeping that trust is the job you'd own. Help us continue to revolutionize the industry! Find out more about us and come join us in our engineering hubs in Berlin and Munich. As a Senior Security Engineer at Capmo, you will get to: own product and cloud security end to end — threat modeling, security reviews, secure-by-default patterns, and the tooling in our CI/CD pipelines (SAST, dependency and container scanning, secret detection) that keeps findings from piling up. harden our AWS infrastructure: IAM architecture, network segmentation, encryption, logging, workload security — and encode the baselines as policy-as-code instead of a wiki page nobody reads. build our detection and response capability from the ground up, and be the technical lead when something actually happens — from detection through containment to the post-incident review. own our vulnerability disclosure and pentest programs, and drive remediation with the product teams rather than filing tickets and hoping. back our compliance work (ISO 27001, SOC 2, GDPR) with real technical controls and evidence, and support customer security reviews together with Sales. shape the direction of security at Capmo as a hands-on senior IC — building guardrails that engineers adopt because they're good, not because they're mandated. What we offer Become a shareholder: Take part in our success with our employee stock option program (VSOP). Grow fast: Benefit from an annual development budget of €1,000 and two Development Days to invest in your personal and professional growth. Fitness, food or mobility budget? With EGYM Wellpass, you get unlimited access to 90+ gyms and swimming pools in Germany – or choose a lunch subsidy or a mobility budget as your preferred benefit. Think ahead: We contribute 20% to your company pension plan. (only applicable in Germany) Hybrid work model: We work in a hybrid setup — 3 days together in the office and 2 days wherever you work best. Exceptional Team: Join a talented and diverse team with limitless growth opportunities. Culture Day Off: Take a day off for essential occasions. What you bring along 7+ years of hands-on security engineering, including several years owning application and cloud security for a production SaaS platform end to end. A track record of building security programs — SDLC, vulnerability management, detection and response — not just operating tools someone else set