Product Security Specialist Middleware (fmd)

Your area of work:

We are looking for a Product Specialist to join the CBL Connectivity & Data development team (HUB) to help with designing security architecture ISO 27001 compliance and development of our mission-critical JMS middleware platform. The platform is an in-house developed high-throughput solution built on Java (JDK 21) and C deployed both as standalone services and containerized on Red Hat OpenShift. It relies on Oracle RDBMS IBM MQ and Apache Kafka structured as microservices communicating via JMS internally and externally.

In this role you will embed SSDLC standards directly into our engineering lifecycle. You will secure data in transit and at rest harden containerized services and automate compliance guardrails within our toolchain (GitHub Enterprise Jira Gradle Jenkins). You will leverage our static and dynamic security scanning tools (Sonar HP Fortify) alongside cutting-edge AI models (Anthropic OpenAI Google) to proactively identify vulnerabilities streamline security controls and ensure our middleware remains resilient and audit-ready.

Were looking for someone who treats software as product analyzing problems deeply designing secure solutions and owning outcomes through to a stable production result.

Your responsibilities:

• Implement and automate controls related to IAM data protection logging and audit trails across application and middleware layers.
• Provide technical evidence documentation and architecture artifacts for internal and external audits regulatory examinations and penetration testing findings.
• Communicate scope timeline and progress proactively; present and refine solution proposals with the team
• Understand security guidelines and apply secure-by-design principles identifying and treating security risks throughout the lifecycle
• Own your work end-to-end - analysis design implementation testing deployment and support (in simulation and production)
• Learn and follow the software delivery process at DBG

Your profile:

• University degree in Computer Science Information Security Engineering
• Practical experience in software development / project management / product management
• Critical thinking - ability to reason about complex systems and identify root causes
• Solid hands-on experience in modern enterprise programming languages (e.g. Java or C)
• Experience with messaging architecture (event streaming pub-sub SOA message-driven middleware) and message formats (XML JSON CSV PDF etc.)
• Self-organizing autonomous and detail-oriented with proactive communication and negotiation skills
• Fluent English (written and spoken) and clear communication skills to liaise between software developers auditors and security officers

Would be an advantage:

• Experience with Linux
• Containerization (Docker Kubernetes OpenShift)
• Cloud Services (GCP/Azure/AWS)
• AI in Software Development
• Experience with CI/CD pipelines (e.g. GitHub Actions/Workflows Jenkins or similar)
• SAST/DAST Tuning and integration such as HP Fortify SonarQube etc.
• Understanding PKI TLS/SSL secrets management (e.g. HashiCorp CyberArk) and encryption mechanisms

You can look forward to our benefit package:

• Hybrid Work and Flexible working hours
• Work from abroad - 12 days of remote work from EU countries per year
• Group Share Plan - discount on company shares
• Pension fund contribution - 3% of your gross salary (5% after 5 years with us)
• Health & Wellbeing - fully covered Multisport card life & accident insurance sick days and 100% salary contribution during sick leave (up to 56 days)
• 25 vacation days
• Mobility - fully covered public transport in Prague & free parking
• Flexible Benefit Account (Pluxee) - 1200 per month
• Free Access to E-Learning Platforms Internal Development Programs Mentoring & Learning Budget