Job
In dieser Position entwickelst du Sicherheitsarchitekturen, evaluierst systematische Risiken und führst technische Sicherheitsstrategien zur Einhaltung von regulatorischen Standards wie DORA und PCI-DSS ein.
Job-Technologien
Deine Rolle im Team
- We are seeking an experienced, high-impact Principal Security Engineer to join our Operational Security (OpSec) function as an individual contributor to lead our technical security strategy and regulatory compliance posture across our e-commerce and financial technology systems.
- In this role, you will bridge deep software engineering and technical system design with regulatory compliance and governance (e.g., DORA, PCI-DSS, ISO 27001), operational resilience and cross-departmental alignment.
- You will serve as the primary technical authority on complex security architectures, change management guardrails, overall security posture and risk assessments for critical financial and cloud infrastructure.
- Function as the technical security reviewer and gatekeeper for high-criticality architecture changes.
- Maintain and enforce baseline configuration standards across cloud, server, and endpoint assets and secure Software Development Life Cycle (SDLC) practices.
- Direct technical alignment with regulatory standards including DORA, PCI-DSS, ISO 27001, and local regulatory frameworks.
- Evaluate security posture, CIA requirements, and Service Level Agreements (SLAs) for critical ICT outsourcing services and payment partner integrations.
- Drive system designs and technical strategies spanning cross-functional multiple teams (engineering teams, product managers, and principal engineers), business units, and corporate entities.
- Foster a Security first culture across departments, and bridge the gap between core engineering teams and information security operations.
Unsere Erwartungen an dich
Qualifikationen
- Deep technical understanding of DORA, PCI DSS, ISO 27001, and ICT risk management frameworks.
- Proven track record in securing cloud-native microservices, web application firewalls (WAF), and supply-chain/CI-CD pipeline security.
- Strong foundation in transport and storage encryption standards, tokenization, PGP/GPG key management, and data classification guidelines.
- Exceptional capability to articulate complex technical security risks to executive leads, auditors, and engineering teams.
Erfahrung
- 8+ years of technical security engineering experience, with demonstrated impact at a Principal / Lead level across multi-team or department-wide scopes.
- Experience in financial services, payment processing, or highly regulated e-commerce environments.
Unser Angebot
- Zalando provides a range of benefits, here's an overview of what you can expect.
- 27 days of holiday a year to start for full-time employees (+1 day for every calendar year up to 30 days).
- 40% off fashion and beauty products sold and shipped by Zalando, 30% off Lounge by Zalando, discounts from external partners.
- Family support, including counselling and dedicated services for parents and carers.
- Company pension scheme.
- Employee shares programme.
- Health and wellbeing options, including Wellhub.
- Mental health support and coaching.
- Development through our training platform and biannual peer-to-peer review.
- 2 paid volunteering days a year.
- Relocation assistance (subject to prior agreement).
Benefits
Work-Life-Integration
Gesundheit, Fitness & Fun
Essen & Trinken
Themen, mit denen du dich im Job beschäftigst
Job-Standorte
Das ist dein Arbeitgeber
Zalando is die europäische Online-Plattform für Mode, die Kunden, Marken und Partner in 17 Märkten verbindet.
- Etablierte Firma
- Onsite, Hybrid, Full Remote
- Handel
Arbeitgeber-Reviews
- Arbeitsbedingungen
- 4,4
- Teamkultur
- 3,5
- Engineering
- 3,1
- Karriere
- 2,6
Weitere Jobs
Diese Jobs könnten dich auch interessieren
Betrieb, Überwachung und Weiterentwicklung der Netzwerk-Infrastruktur. Administration und Konfiguration von Firewalls, Routern und Switches. Sicherstellung der Netzverfügbarkeit, -performance und -sicherheit. Mitwirkung bei IT‐Sicherheitskonzepten und...
Wer hier einsteigt, gestaltet nicht nur Software – er bringt Maschinen zum Laufen, die man auf echten Baustellen wiedererkennt. Software-Entwickler (m/w/d) Basic Engineering Unser Auftraggeber ist ein international führender Hersteller von technisch...
Die sino AG, mit Sitz in der Düsseldorfer Innenstadt, ist seit über 25 Jahren ein innovativer Finanzdienstleister. Wir haben uns auf die Abwicklung von Wertpapiergeschäften für die aktivsten und anspruchsvollsten Trader in Deutschland spezialisiert. Mit...
