Senior Software Engineer

In this role you will advance Avaloq’s security-centric software delivery by building and maintaining automation, CI/CD tooling, and security integrations across the development lifecycle. You’ll collaborate with software engineers, DevOps, and security teams to deliver scalable, secure software and enhance vulnerability management. The position sits in the Security Assurance team, shaping secure practices across cloud-native environments and enterprise platforms. This is an opportunity to impact risk mitigation at scale while working in a collaborative, flexible culture.

• hybrid and flexible working
• inclusive culture
• diverse workforce
• global offices
• collaborative environment
• competitive compensation

• Design, implement, and maintain internal CI/CD pipelines and automation tooling for vulnerability management and security workflows
• Develop and maintain security integrations across the software delivery lifecycle (source-code, repositories, dependencies, containers)
• Build and maintain backend services and APIs supporting security scanning, vulnerability analysis, event processing, and reporting
• Monitor automated build and security validation, analyze findings, and implement fixes or guidance as needed
• Evaluate vulnerabilities, assess risk, investigate false positives, and support remediation solutions
• Enhance automated security analysis workflows and integrate with issue-management systems (e.g., Jira)
• Develop security reporting dashboards providing actionable insights on vulnerabilities and remediation status
• Work with containerized apps and cloud-native environments (Kubernetes, OpenShift, OCI)
• Coordinate security actions across teams to ensure timely remediation and product quality
• Share knowledge on secure software development and continuous improvement
• Participate in internal technical discussions to promote security best practices

• University degree in Information Technology, Computer Science, Mathematics, Physics, or related technical discipline
• Experience designing and maintaining internal CI/CD pipelines, developer tooling, and automation platforms
• Senior-level software engineering with hands-on Java/Spring Boot, Python, JavaScript/TypeScript, Gradle, Jenkins/Groovy
• Experience with REST APIs, event-driven architectures, and service integration
• Strong knowledge of Docker, Kubernetes and/or OpenShift; OCI experience desirable
• Deep understanding of application security, secure SDLC, and industry best practices
• Experience with vulnerability management tools, security scanning, and automated security testing
• Experience integrating security tooling into CI/CD pipelines
• Ability to explain technical topics to non-technical stakeholders
• Positive, collaborative mindset and cross-team influence
• Nice-to-have: experience with financial markets/products

• collaborative teamwork
• strong communication
• problem-solving with attention to detail
• CI/CD pipelines and automation tooling
• security scanning and vulnerability management
• Java / Spring Boot