Secure Software Development Specialist f/m/x - Chief Security Office CTO - db

Job Description: About the job Deutsche Bank Technology in Berlin DB Technology is a global team of tech specialists, spread across multiple trading hubs and tech centres. We have a strong focus on promoting technical excellence our engineers work at the forefront of financial services innovation using cutting-edge technologies. Our Berlin location is our most recent addition to our global network of tech centres and growing strongly. We are committed to building a diverse workforce and to creating excellent opportunities for talented engineers and technologists. Our tech teams and business units use agile ways of working to create #GlobalHausbank solutions from our home market. Chief Security Office (CSO) TDIs Chief Security Office is responsible for the creation, maintenance, and implementation of the information security strategy of Deutsche Bank Group. CSO steers the measures derived from the information security strategy and provides guidance to employees regarding the identification, development, implementation, and execution of all processes which serve to reduce information security risk, to respond to incidents, and to establish appropriate policies and standards for information security management. Youll be joining the Secure Software Development Team. The teams purpose is to drive the efficient integration of security services into DBs Software Development Processes and CI/CD Platforms, and that security is embedded as early as possible. Secure Coding Standards, best practices and guidance for application development teams are some of our core deliverables we provide to support security in software development. As a Secure Software Development Specialist (f/m/x) you will be supporting the Shift-Left-Approach" to shift security responsibilities to those creating software and shift it towards the beginning of the process. The responsibility is to define our secure coding standards and continuously enhance our secure coding guidance, blueprints, and best practices on different levels so that this is easy to consume for our developers, but also satisfies external and regulatory requests. -> You love this job but feel you cannot tick 100% of the boxes Send us your CV anyway! Your key responsibilities Work with business divisions to identify and train Security Champions from the application teams and work with them on several security topics that will be incorporated into their software projects. Collaborate with application teams to help them identify the application security threats by moderating the threat modelling game in preparation for the Security Design Authority (SDA) approval process. Create/Update security guidelines for engineers, by continuously enhancing the guidance documents and confluence pages to address secure code snippets as good practices, checklists etc. .