Senior Security Software Engineer (Cryptography and Threat Modeling)

About the role

We are looking for a Senior Security Software Engineer with deep expertise in cryptography and threat modeling. You will lead the creation of a cryptographic inventory, ensure FIPS 140-3 compliance, and work closely with product and security teams to embed security throughout the development lifecycle.

Key responsibilities

• Build and maintain a crypto inventory using IBM QSE and agentic validation.
• Review findings related to FIPS 140-3 compliance and define mitigation plans.
• Coordinate with engineering teams to track and implement cryptographic mitigation actions.
• Facilitate threat modeling workshops for cloud applications and produce actionable reports.
• Contribute to Secure Development and Operations Lifecycle (SDOL) activities.
• Prepare handover documentation and support knowledge transfer to the Security Team.

Required profile

• Minimum 3 years of hands‑on software security experience.
• Proven experience with FIPS 140-3 compliance and cryptographic inventory management.
• Ability to work independently and drive security initiatives to completion.
• Strong documentation, communication, and stakeholder‑management skills.
• Experience facilitating threat‑modeling workshops and producing security reports.
• Upper‑intermediate English proficiency (B2+).

Required skills

• Cryptography
• FIPS 140-3 compliance
• IBM QSE
• Jira for task and project tracking

What we offer

• Innovative projects for global industry leaders.
• Flexible work environment – office or home.
• Opportunities to work abroad up to two months per year.
• Relocation options across 55+ countries.
• Leadership development, certifications (GCP, Azure, AWS) and unlimited learning resources.
• Medical and family care package, referral bonuses, and six trust days per year.
• Discounts for fitness clubs, sports programs, and a broad benefits package.