This is a unique hybrid position sitting within our Infrastructure team. You'll contribute as a hands-on Senior backend Engineer while simultaneously taking ownership of our information security strategy, acting as our de facto CISO. You'll be the go-to person for all security-related topics, bridging the gap between engineering, operations, and leadership. If you love building resilient systems and want your security work to have real company-wide impact, this role is for you.
What You'll Do
-
Collaborate with product teams and infrastructure on architecture decisions with a security-first mindset.
-
Design, build, and maintain scalable, secure backend services and APIs in Python / Django.
-
Own and drive TeleClinic's ISO 27001 certification and ongoing compliance, from gap analysis through to audit readiness.
-
Develop, maintain, and enforce the company-wide Information Security Management System (ISMS).
-
Define and implement security policies, standards, and procedures across and with all teams.
-
Lead risk assessments, threat modelling, and vulnerability management.
-
Educate and upskill colleagues on security awareness and best practices.
-
Monitor the threat landscape and proactively address emerging risks relevant to a regulated healthcare environment.
What You Bring
-
5+ years of Python backend engineering experience.
-
Solid understanding of network security, identity & access management, encryption, and secure SDLC.
-
Hands-on experience with ISO 27001, ideally having led or significantly contributed to an implementation or re-certification.
-
Familiarity with healthcare data regulations (GDPR, potentially HIPAA, or German digital health regulations such as DiGA) is a strong plus.
-
Strong communicator who can translate complex security concepts to non-technical stakeholders.
-
Proven track record with cloud infrastructure (AWS, GCP, or Azure) and modern DevSecOps practices is a plus.
-
Fluent in English; German is a plus.
Our salaries are determined based on objective and role-related criteria, aligned with the local market standards of your specific hiring country. Your dedicated recruiter will be happy to provide detailed information about the relevant salary bands prior to your first interview.
#LI-AS2
#LI-Remote
