Information Security Engineer

Camunda is the enterprise platform for agentic orchestration, enabling organizations to coordinate AI agents, people, and systems across complex, end-to-end business processes. Fully remote and global, we are transforming into an AI-first organisation. As a Senior Information Security Engineer (AppSec) at Camunda, you’ll join a small, senior, and highly collaborative InfoSec team that lives our FAITH values – Focus, Ambition, Integrity, Talent and Humor. This is a technical, hands-on, developer-centric role where you’ll shape how we build secure Java services in a modern CI/CD, SaaS environment. What you'll be doing: Partner with engineering teams throughout the SDLC; Lead and evolve our AppSec tooling and workflows (SAST, DAST, SCA, and container/image scanning); Drive vulnerability management for our applications and supply chain; Perform secure design and architecture reviews and threat modeling; Support and help coordinate application-layer security incidents. What you bring: Strong Software engineering and secure coding background (Java); Secure SDLC, architecture & risk assessment experience; Vulnerability management & security tooling expertise; Cross-team collaboration & communication skills. Nice-to-haves: Experience in Python, JavaScript, or TypeScript; Kubernetes or container-based workloads; B2B software company experience. Compensation: United States: $143,800.00 to $231,900.00; United Kingdom: £90,300.00 to £148,500.00; Singapore: S$178,600.00 to S$267,900.00. Benefits include home office budget, co-working space support, flexible time off, Annual Kickoff, Modern Health, and a professional growth budget of up to 1,000 per year.