Security Engineer – Application & Product Security

About the role

Antaes is looking for a Security Engineer to lead application and product security initiatives in Geneva. You will define security requirements, build a security case, and embed security controls throughout the software development lifecycle.

Key responsibilities

• Define and maintain product security requirements, ensuring traceability to tests and verification evidence.
• Build and maintain the security case, including risk and threat analyses, security architecture, control justification, and compliance evidence.
• Implement a secure development lifecycle (threat modeling, design reviews, secure coding) and integrate security tooling (SAST, DAST, SCA, secrets management, SBOM) into CI/CD pipelines.
• Drive vulnerability management and support development teams in remediation.
• Contribute to ISO 27001 certification activities such as policies, procedures, risk register, metrics, and internal audits.
• Establish the security function as the first Security Engineer, defining roadmap, tooling, awareness, and upskilling initiatives.

Required profile

• Autonomous, responsible and committed with a structured mindset.
• Proven ability to build a function from scratch and influence development teams without hierarchical authority.
• Clear, concise communicator who works well in a team.
• Fluent in English; French is a plus.

Required skills

• Secure SDLC, threat modeling, and OWASP frameworks (Top 10, ASVS, SAMM).
• Integration of security tooling into CI/CD pipelines (SAST, DAST, SCA, secrets, SBOM).
• Risk analysis, security architecture, and vulnerability management.
• Knowledge of ISO 27001 certification processes.
• Relevant certifications such as CISSP, CSSLP, OSWE are an asset.
• Domain knowledge of ED‑205 and ATM/navigation aérienne is a plus.

What we offer

• A dynamic, entrepreneurial team within a people‑oriented environment.
• Personalized career support, development opportunities, and challenging projects.
• Regular company events, team‑building activities, workshops, and an annual Summer Event.
• Recognition for CSR excellence (EcoVadis Gold Medal 2025) and a certified @HappyAtWork workplace.