Sherpany is the Swiss market leader for meeting management software. Since its founding in 2011, it has pursued the goal of creating a world in which every meeting counts. Over 400 European companies and 12,000 decision-makers are already using Sherpany with the aim of making their business relevant meetings more productive and thereby increasing corporate success. With headquarters in Zurich and 130 Sherpanees from 27 different nationalities, we are an international company with a flat hierarchy, in which you can take lot of responsibility and your ideas are always welcome.
Your mission:
As a Security Engineer you will be a vital link between the security team and Sherpany's Product and Tech Teams, ensuring security is deeply integrated into company/product processes and technologies. You will join a security team that constantly pushes maturity boundaries and that thrives in pursuing excellence. Your main responsibility is to ensure (1) that Sherpany consistently builds secure technologies by providing impactful security engineering support and (2) that Sherpany maintains safety and resilience by driving consistent security improvements to key company processes and technologies
What we will love about you:
- Experience in threat modelling using common frameworks like STRIDE, PASTA, LINDDUN etc. Experience with threat modelling LLM AI solutions a plus;
- Experience managing either penetration testing or vulnerability management programs;
- Ability to work with Google Looker Studio;
- Proven ownership of technical cybersecurity topics and ability to become a trusted partner with technical teams, being able to influence or advise technical stakeholders;
- Fluency in English (spoken, written);
- Nice to have:
- Ability to write scripts using Python a plus;
- You speak and understand German at a native or “expert” level.
How you can imagine us:
- You will be part of an international company with a flat hierarchy where you can take on a lot of personal responsibility and your ideas are always welcome;
- To ensure your work-life balance, we offer flexible working hours, remote-first policy and the possibility of unpaid vacation after your first year with us DIGITAL NOMAD @SHERPANY;
- Your personal and professional development is important to us, which is why we offer financial support for further education, training, etc.
- Your personal well-being is important to us - our partner nilo.health supports you in this;
- We work with new technologies and Apple MacBooks, which will be provided to you when you start;
- Last but not least: Our corporate culture means a lot to us, which is why we regularly organize great team events and cultivate a value-oriented cooperation.
Recruiting process:
- Interview with our Talent Acquisition Specialist
- Interview with our CISO
- Final interview: Meet our VP Engineering
- Job offer
Signing Bonus: If you apply before 31st December 2024, you'll get a cool CHF 1,000 in your first paycheque! Speak to your Talent Acquisition Specialist for more details
Milestones
1-3 months
- Understand Sherpany vulnerability management and penetration testing services;
- Understand Sherpany security issue triaging process;
- Understand Sherpany as a product and technology, the Product Team organization, how we work inside and with other departments;
- Understand our Infrastructure and get familiar with our repositories and key services of the application;
- Become familiar with packaging and deploying process for both: application as well as IaC;
- Schedule coffee chats with Sherpybuddy, security team members, tech leads and product managers.
3-6 months:
- Develop a catalogue to track ongoing projects requiring threat modelling within the company;
- Develop a roadmap to coordinate the execution of reactive threat modelling activities;
- Own vulnerability and pentest management sections of the weekly security meeting;
6+ months
- Develop a 2026 roadmap for the improvement of security engineering services (covering vulnerability management, penetration testing and threat modelling);
- Design and implement Sherpany’s new and evolved threat modelling process;
- Take over ownership of vulnerability management and penetration testing services.
Are you ready for the challenge? We look forward to receiving your application!
