Principal Software Security Officer (m/f/d)

Define the standards. Challenge the risks. Strengthen our software security.

Secure software does not happen by accident. At Giesecke+Devrient Currency Technology, we develop technologies and solutions that help create trust worldwide. From digital products and manufacturing systems to complex software platforms operating in highly sensitive environments, security is not an an-add-on. It is a fundamental requirement. That's why we're looking for someone who thinks about software security holistically. Someone who doesn't just identify risks but establishes standards. Someone who empowers teams to build secure software. Someone who sees security as an enabler of innovation rather than a barrier to it.

As a Principal Software Security Officer, you will be part of our multidisciplinary Global Security organization. Operating independently from development teams, you will help shape the future of secure software development across G+D. Your Mission You will own the governance and continuous evolution of our Secure Software Development Lifecycle (SSDLC). Working closely with engineering, architecture, product management, and security teams, you will ensure that Security by Design becomes an integral part of the entire software lifecycle.

Your Responsibilities

• Establish, evolve, and oversee our Secure Software Development Lifecycle (SSDLC)

• Define software security standards, policies, and processes across the organization

• Advise development and architecture teams on Security by Design principles

• Conduct threat modeling exercises, risk assessments, and security reviews

• Assess software architectures, APIs, cloud solutions, and integration concepts from a security perspective

• Embed security requirements into development processes, CI/CD pipelines, and release workflows

• Define and oversee security gates and security acceptance criteria

• Evaluate third-party software, open-source components, and software supply chains

• Support security testing, vulnerability management, and risk remediation activities

• Coach and mentor developers, architects, and Security Champions on secure development practices

• Contribute to audits, supplier assessments, and customer-facing security assurance activities

• Assess emerging technologies, cloud services, and AI-assisted software development from a security perspective

Your Qualifications

• Degree in Computer Science, Information Security, Software Engineering, or a comparable qualification

• Experience in software engineering, software architecture, application security, product security, or a related technical field

• Genuine interest in secure software development and modern software architectures

• Knowledge of secure software development practices, including SSDLC, threat modeling, secure coding, security testing, and vulnerability management

• Understanding of cloud security and DevSecOps principles

• Familiarity with industry standards and frameworks such as OWASP SAMM, OWASP ASVS, NIST SSDF, IEC 62443-4-1, OWASP Top 10, and CWE

• Strong analytical thinking and a structured approach to problem solving

• Excellent communication skills with the ability to collaborate effectively across diverse teams and stakeholders

• Ability to translate complex security concepts into practical and business-oriented solutions

• Collaborative mindset with a passion for driving security excellence across the software development lifecycle

• Strong written and spoken English skills

• Curiosity, continuous learning, and enthusiasm for staying up to date with evolving security trends and technologies

• Motivation to make a meaningful impact by helping teams build secure and resilient software products across the organization

Why This Role Is Different

This position combines technical depth, strategic influence, and meaningful impact. You will become part of a global security organization and help shape how secure software development is implemented across an international technology company. Your influence will extend across digital products, internal applications, and complex software supply chains. You won't be working on just one project. You will help define the security standards for an entire organization. We believe in potential, not checklists. If this role excites you, we'd love to get to know you.