Application Security Engineer

The PSI Group develops software products for optimizing the flow of energy and materials for utilities and industry. As an independent software producer with more than 2300 employees PSI has been a technology leader since 1969 for process control systems that ensure sustainable energy supply production and logistics by combining AI methods with industrially proven optimization methods. The innovative industry products can be operated on-premises or in the cloud.

The PSI Group develops software products for optimizing the flow of energy and materials for utilities and industry. As an independent software producer with more than 2300 employees PSI has been a technology leader since 1969 for process control systems that ensure sustainable energy supply production and logistics by combining industrially proven IT and automation solutions with AI-based optimization methods. The innovative industry products can be operated on-premises or in the cloud.

The Process Industries & Metals (PIM) business unit is recognized as the number one provider of software and consulting services for production management solutions for the metals industry. We develop customized high-quality solutions to maximize the plant performance of our customers worldwide and provide them with innovative solutions to support intelligent production processes with the goals of increasing efficiency and supporting decarbonization. Together lets shape the future of manufacturing and exceed industry standards.

Tasks inspiring you

We are seeking a proactive and detail-oriented Application Security Engineer to support our PIM Business Unit by ensuring alignment with product and project security standards and practices defined by our Central Function Information Security of PSI Group. This role focuses on oversight coordination and monitoring making it ideal for a technically grounded professional who also excels in process assurance and cross-functional collaboration.

Key Responsibilities

• Monitor and evaluate PIM product and project processes and software development to ensure alignment with our company-wide guidelines and security standards.
• Track and follow up on action items and remediation tasks related to associated security threats audits and assessments.
• Proactively monitor public sources for emerging security vulnerabilities or threats that may impact PIM systems or products.
• Alert relevant teams to new threats and ensure timely mitigation efforts are initiated and tracked to completion.
• Support internal product and project reviews and audits contributing evidence and documentation as needed.
• Work closely with PIM development and operations teams to promote secure-by-design practices and raise awareness of the Central Function expectations.
• Assist in preparing reports responses and documentation for both internal stakeholders and external clients/auditors.
• Act as a liaison between Central Function and the PIM team ensuring product and project security guidelines and standard updates and expectations are communicated and applied.
• Help maintain PIMs compliance with relevant standards such as IEC 62443

Qualifications that inspire us

• 35 years of experience in information security within a tech or software development environment.
• Solid understanding of security frameworks and policies (e.g. IEC 62443 OWASP ASVS OWAS Top 10).
• Familiarity with software development processes and secure coding principles.
• Experience in reviewing processes and workflows for security and compliance gaps.
• Experience in threat modelling for on-prem and cloud application Strong organizational and communication skills; ability to coordinate with technical and non-technical teams.
• Awareness of vulnerability disclosure channels and current threat landscapes Industry certifications (e.g. CISSP) are a plus but not required.
• Fluent in English (German is a plus)

Look forward to

Pioneering a smarter world. Are you on board