Staff Engineer - Policy as Code (m/f/d)

Join to apply for the Staff Engineer - Policy as Code (m/f/d) role at SoSafe

SoSafe has the ambition to become the leading human risk management provider in Europe. Our award‑winning awareness platform triggers behavioural change by providing effective and engaging training and simulations on cybersecurity and data protection. Cybercrime is predicted to cost the world $10.5 trillion annually by 2025 - we invite you to be part of the solution!

Here’s how you’ll make a difference

• Lead design, implement, and maintain policy‑as‑code, tests, and process automation that make security controls measurable and verifiable
• Build and integrate pipelines that connect product, business, compliance and security data into shared systems
• Improve and simplify cross‑team processes by automating recurring checks, evidence collection, and reporting
• Integrate your solutions with existing workflows such as Security Operations and Security Observability
• Help define and evolve a consistent internal data model for tracking security posture and control health
• Contribute to or head open‑source selected components of our work to aid transparency and reusability
• Participate in our in‑hours triage rotation to stay close to operational challenges and feedback loops
• Collaborate with other teams on wider architectural patterns and best practices for securing multi‑tenant SaaS applications

What makes you a great fit

• Genuine interest in learning security concepts and applying engineering know‑how to improve how security works in practice
• Professional experience in DevOps, IT engineering, data engineering, or similar roles supporting SaaS products
• Strong programming experience in a modern language such as Python or Go (we primarily work in TypeScript)
• Some knowledge of AWS services and tools such as Kubernetes, Terraform, Datadog, and Git/GitHub workflows
• Experience designing or improving cross‑team processes through automation
• Ability to think holistically about systems, data, and user needs – and turn that into working, maintainable solutions

Nice to haves

• Professional experience working with or within a security team is a plus, but not required
• Background in data management, pipelines, or internal tooling
• Experience using AI tools creatively to improve efficiency and simplify work

What we offer

• Work/Life balance: Flexible hours, 33 vacation days
• Wellbeing and financial support: Access to Open Up, corporate discounts
• Connection & community: Virtual events, collaborative team activities, and opportunities for local meet‑ups
• Tech equipment, referral bonuses, dog‑friendly HQ, and more
• Perks and benefits listed above are for full‑time employees and may vary slightly by office location. These are just a sample — you’ll learn more during the interview process.

About Us

At SoSafe, we’re on a mission to make the digital world safer by addressing the human factor in cybersecurity. As one of the fastest‑growing security awareness scale‑ups worldwide, we leverage behavioural science and data‑driven learning to empower people against cyber threats. Our Human Risk Management approach helps organisations turn their employees into their strongest line of defence.

Backed by leading VCs like Highland Europe and Global Founders Capital, we’re rapidly expanding across the globe. We’re looking for team players who want to drive meaningful change in cybersecurity, take ownership of their work, and grow with us.

If you thrive in a vibrant, purpose‑driven environment that values innovation, diversity, and collaboration, then this is the place for you!