Product Security Specialist - Middleware (f/m/d)

Your area of work:

We are looking for a Product Specialist to join the CBL Connectivity & Data development team (HUB) to help with designing security architecture, ISO 27001 compliance, and development of our mission-critical JMS middleware platform. The platform is an in-house developed, high-throughput solution built on Java (JDK 21+) and C++, deployed both as standalone services and containerized on Red Hat OpenShift. It relies on Oracle RDBMS, IBM MQ, and Apache Kafka, structured as microservices communicating via JMS internally and externally.

In this role, you will embed SSDLC standards directly into our engineering lifecycle. You will secure data in transit and at rest, harden containerized services, and automate compliance guardrails within our toolchain (GitHub Enterprise, Jira, Gradle, Jenkins). You will leverage our static and dynamic security scanning tools (Sonar, HP Fortify) alongside cutting-edge AI models (Anthropic, OpenAI, Google) to proactively identify vulnerabilities, streamline security controls, and ensure our middleware remains resilient and audit-ready.

We're looking for someone who treats software as product — analyzing problems deeply, designing secure solutions, and owning outcomes through to a stable production result.

Your responsibilities:

• Implement and automate controls related to IAM, data protection, logging, and audit trails across application and middleware layers.
• Provide technical evidence, documentation, and architecture artifacts for internal and external audits, regulatory examinations, and penetration testing findings.
• Communicate scope, timeline, and progress proactively; present and refine solution proposals with the team
• Understand security guidelines and apply secure-by-design principles, identifying and treating security risks throughout the lifecycle
• Own your work end-to-end - analysis, design, implementation, testing, deployment, and support (in simulation and production)
• Learn and follow the software delivery process at DBG

Your profile:

• University degree in Computer Science, Information Security, Engineering
• Practical experience in software development / project management / product management
• Critical thinking - ability to reason about complex systems and identify root causes
• Solid hands-on experience in modern enterprise programming languages (e.g. Java or C++)
• Experience with messaging architecture (event streaming, pub-sub, SOA, message-driven middleware) and message formats (XML, JSON, CSV, PDF, etc.)
• Self-organizing, autonomous, and detail-oriented, with proactive communication and negotiation skills
• Fluent English (written and spoken) and clear communication skills to liaise between software developers, auditors, and security officers

Would be an advantage:

• Experience with Linux
• Containerization (Docker, Kubernetes, OpenShift)
• Cloud Services (GCP/Azure/AWS)
• AI in Software Development
• Experience with CI/CD pipelines (e.g. GitHub Actions/Workflows, Jenkins or similar)
• SAST/DAST Tuning and integration, such as HP Fortify, SonarQube, etc.
• Understanding PKI, TLS/SSL, secrets management (e.g. HashiCorp, CyberArk), and encryption mechanisms

You can look forward to our benefit package:

• Hybrid Work and Flexible working hours
• Work from abroad - 12 days of remote work from EU countries per year
• Group Share Plan - discount on company shares
• Pension fund contribution - 3% of your gross salary (5% after 5 years with us)
• Health & Wellbeing - fully covered Multisport card, life & accident insurance, sick days and 100% salary contribution during sick leave (up to 56 days)
• 25 vacation days
• Mobility - fully covered public transport in Prague & free parking
• Flexible Benefit Account (Pluxee) - 1200 per month
• Free Access to E-Learning Platforms, Internal Development Programs, Mentoring & Learning Budget