Staff Software Engineer (all genders)

Location: Germany/Berlin/Stuttgart (Remote) Who You’ll Work For : At Makersite, we're pioneering the future of sustainable product development and digital collaboration. As a leading platform for product lifecycle management (PLM), we empower companies to make smarter, more sustainable decisions across their entire supply chain. Our cutting-edge software enables teams to design, prototype, and manufacture with transparency, efficiency, and responsibility—reducing environmental impact while optimizing performance. We're a fast-growing, innovative company that thrives on creativity, collaboration, and continuous learning. If you're passionate about technology, sustainability, and creating meaningful impact, we’d love to hear from you. Join us and be a part of shaping the future of manufacturing and product innovation. Who we're looking for: As part of our growing team, you will play a key role in shaping the future of sustainable product development. We’re looking for innovative, driven Site Reliability Engineers who are passionate about technology and sustainability to join us in building tools that enable companies to make smarter, more responsible decisions. In this role, you’ll have the opportunity to collaborate with talented professionals, contribute to cutting-edge projects, and help drive the digital transformation of industries worldwide. If you're ready to make an impact and contribute to meaningful change, we want to hear from you! This role is a fixed, permanent position. All successful applicants will need to reside in Germany with legal working permits or residence permits. The role: Infrastructure Management: Maintain and manage new and existing infrastructure, balancing both proactive and reactive maintenance. Technical Problem Identification and Resolution: Identify technical problems and bottlenecks. Collaborate with the engineering team to resolve these issues efficiently. ISO Compliance: Ensure all infrastructure and processes are in compliance wi…

Publié 10 Nov 2026

Distribusion is the world’s leading ground transportation marketplace and gives travellers seamless access to ground transportation online, from search to ticket purchase. We have built a cutting-edge B2B technology platform that connects bus, rail and ferry operators in 70+ countries with the biggest online retailers including Google Maps and Booking.com. We are shaping the future of travel and building the largest global network of transport providers and retailers. We are one of the fastest growing startups in travel, backed by leading venture capital investors including TQ Ventures, Lightrock, Creandum, and Northzone, and are headquartered in Berlin, Germany. Following our recent $80m Series C funding, we are ready to push beyond. We are looking for our first dedicated Senior Application Security Engineer to build our AppSec practice from the ground up. This is a greenfield opportunity with a real attack surface: public partner-facing APIs and payment flows. You will own secure development, define what gets reviewed, implement security gates, build the "paved road" for ~150 engineers, and see the impact of your work in production within weeks. What you will do: Lead threat modeling and secure design reviews for high-risk changes, partner integrations, and payment flows. Implement, tune, and enforce security gates in GitLab CI/CD (SAST, SCA, secrets scanning, and DAST) while minimizing developer friction. Act as the primary technical owner for triaging, reproducing, and prioritizing findings from bug bounties, partner pentests, and automated scanners. Work hands-on with the DevOps team to implement GCP organizational policies, IAM least-privilege architectures, and Cloud Armor (WAF/rate limiting). Establish a security-champions network across engineering squads and leverage automation/AI-assisted tooling to scale code reviews effectively. Own vulnerability management end to end: a risk-ranked backlog, remediation SLAs, an escalation path, and closing findings to…

Publié 10 Nov 2026

Distribusion is the world’s leading ground transportation marketplace and gives travellers seamless access to ground transportation online, from search to ticket purchase. We have built a cutting-edge B2B technology platform that connects bus, rail and ferry operators in 70+ countries with the biggest online retailers including Google Maps and Booking.com. We are shaping the future of travel and building the largest global network of transport providers and retailers. We are one of the fastest growing startups in travel, backed by leading venture capital investors including TQ Ventures, Lightrock, Creandum, and Northzone, and are headquartered in Berlin, Germany. Following our recent $80m Series C funding, we are ready to push beyond. We are looking for an experienced Senior Penetration Tester to join us as soon as possible. You will run hands-on, authenticated security testing across a real attack surface: public partner-facing booking APIs, payment flows, web and mobile apps used by millions of travellers, and the cloud infrastructure behind them. You’ll plan and run your own testing, work directly with our engineering squads to get findings fixed, and see your impact in production within weeks. What you will do: Test our partner-facing booking APIs against the OWASP API Security Top 10, with a focus on object- and function-level authorization, tenant isolation, mass assignment, data exposure and rate limiting. Assess API authentication and integrity end to end, including OAuth 2.0/OIDC, API keys, JWTs, webhooks and request signing. Hunt for business-logic abuse in booking, checkout, payment and refund flows, including race conditions and pricing manipulation. Run authenticated tests of traveller-, partner- and operator-facing web and mobile apps following OWASP WSTG and ASVS, including how passenger personal data is stored, shown and exported. Review cloud, Kubernetes and CI/CD configurations and secrets handling for attack paths that could be chained from an ap…

Publié 6 Nov 2026