Hiring freshers
Secfix GmbH
Cybersecurity, governance risk and compliance software, information security, SaaS, regulatory compliance automation, and IT consulting
1 fresher opening
Secfix GmbH, c/o St. Oberholz, Erika-Mann-Straße 25, 80636 Munich, Germany
LinkedIn and several company directories list 11–50 employees. This is a third-party range, not an audited headcount. The company has described its team as approximately 18 people in earlier recruitment material.
Hiring freshers
Secfix GmbH
Cybersecurity, governance risk and compliance software, information security, SaaS, regulatory compliance automation, and IT consulting
1 fresher job
Founded 2021
LinkedIn and several company directories list 11–50 employees. This is a third-party range, not an audited headcount. The company has described its team as approximately 18 people in earlier recruitment material.
Secfix GmbH, c/o St. Oberholz, Erika-Mann-Straße 25, 80636 Munich, Germany
About Secfix GmbH
Company overview for fresher applicants
Secfix GmbH is a Munich-based cybersecurity SaaS company founded in 2021. It builds compliance automation software for frameworks such as ISO 27001, SOC 2, TISAX, GDPR, NIS2, and DORA. Its platform covers evidence collection, risk management, policies, vendor reviews, and security monitoring. Secfix reports ISO/IEC 27001:2022 certification, TISAX AL2, and an audited SOC 2 Type II report. It hires across engineering, security, GRC, product, and customer-facing teams, mainly in Europe.
Secfix GmbH is a privately held German technology company founded in 2021 and headquartered in Munich. It develops a software platform that helps startups, small and medium-sized businesses, and mid-market organizations manage information security and regulatory compliance. Its work sits at the intersection of cybersec...
Secfix GmbH is a privately held German technology company founded in 2021 and headquartered in Munich. It develops a software platform that helps startups, small and medium-sized businesses, and mid-market organizations manage information security and regulatory compliance. Its work sits at the intersection of cybersecurity, enterprise software, governance, risk management, and audit readiness.
The Secfix platform is designed to reduce manual compliance work. It brings together evidence collection, control tracking, risk assessments, policy management, vendor reviews, employee compliance, asset management, and device monitoring. Integrations with cloud providers, identity platforms, ticketing tools, HR systems, and mobile device management products help collect information from systems that businesses already use. Secfix also combines software automation with specialist support, including CISO-as-a-Service and audit expertise.
The company supports programs and frameworks including ISO/IEC 27001, SOC 2, TISAX, GDPR, NIS2, DORA, ISO 27701, ISO 27018, and ISO/IEC 42001. These are standards and regulatory frameworks that customers may use or work toward; they should not be confused with certifications held by Secfix itself. Secfix separately states that it holds ISO/IEC 27001:2022 certification and TISAX Assessment Level 2, and that its SOC 2 Type II controls have been audited.
For software job seekers, Secfix offers a specialist product environment where security, automation, integrations, and customer trust shape engineering decisions. Relevant work areas can include SaaS product engineering, backend and frontend development, cloud infrastructure, identity and access management, API integrations, security engineering, data workflows, AI-assisted compliance, and product design. The company's security policy describes secure development practices such as peer review, automated security checks, dependency scanning, threat modelling, and recurring penetration testing.
Secfix identifies Munich, Berlin, London, and remote locations across Europe as part of its team footprint. Its current public careers portal is hosted on Ashby. Roles may be remote or hybrid depending on country, function, and seniority. The company does not list a confirmed India office in the public sources reviewed, so applicants based in India should check whether a particular vacancy accepts applicants from India and supports employment there.
The Secfix platform is designed to reduce manual compliance work. It brings together evidence collection, control tracking, risk assessments, policy management, vendor reviews, employee compliance, asset management, and device monitoring. Integrations with cloud providers, identity platforms, ticketing tools, HR systems, and mobile device management products help collect information from systems that businesses already use. Secfix also combines software automation with specialist support, including CISO-as-a-Service and audit expertise.
The company supports programs and frameworks including ISO/IEC 27001, SOC 2, TISAX, GDPR, NIS2, DORA, ISO 27701, ISO 27018, and ISO/IEC 42001. These are standards and regulatory frameworks that customers may use or work toward; they should not be confused with certifications held by Secfix itself. Secfix separately states that it holds ISO/IEC 27001:2022 certification and TISAX Assessment Level 2, and that its SOC 2 Type II controls have been audited.
For software job seekers, Secfix offers a specialist product environment where security, automation, integrations, and customer trust shape engineering decisions. Relevant work areas can include SaaS product engineering, backend and frontend development, cloud infrastructure, identity and access management, API integrations, security engineering, data workflows, AI-assisted compliance, and product design. The company's security policy describes secure development practices such as peer review, automated security checks, dependency scanning, threat modelling, and recurring penetration testing.
Secfix identifies Munich, Berlin, London, and remote locations across Europe as part of its team footprint. Its current public careers portal is hosted on Ashby. Roles may be remote or hybrid depending on country, function, and seniority. The company does not list a confirmed India office in the public sources reviewed, so applicants based in India should check whether a particular vacancy accepts applicants from India and supports employment there.
Industry
Cybersecurity, governance risk and compliance software, information security, SaaS, regulatory compliance automation, and IT consulting
Founded
2021
Company Size
LinkedIn and several company directories list 11–50 employees. This is a third-party range, not an audited headcount. The company has described its team as approximately 18 people in earlier recruitment material.
Work Mode
Secfix describes itself as remote by design, with teams in Munich, Berlin, London, and across Europe.
Why Work at Secfix GmbH?
Company laptop, listed in third-party recruitment profiles; confirm current eligibility.
Company stock options, listed in third-party recruitment profiles; subject to plan terms.
Flexible working hours, as described in recruitment profiles.
Remote-work arrangements for eligible roles and approved countries.
Home-office support or equipment for eligible employees.
Secfix may appeal to people who want to build software in a field where product quality and customer trust are closely connected. Its platform helps businesses organize security controls, collect audit evidence, manage risks, and maintain compliance. Engineers work on practical problems that involve cloud services, identity systems, integrations, workflow automation, and secure handling of business information.
The product spans several technical areas. Backend developers may work on APIs, integrations, data processing, and workflow services. Frontend engineers can build interfaces that make complex compliance tasks easier to understand. Platform and security engineers may focus on cloud infrastructure, access control, monitoring, secure development, and vulnerability management. Product and design teams need to turn detailed security requirements into clear user experiences for customers with different levels of technical knowledge.
Secfix also combines software with hands-on security expertise. This creates opportunities to work with auditors, compliance specialists, customer success teams, and security leaders. Engineers can learn how frameworks such as ISO 27001, SOC 2, TISAX, GDPR, and NIS2 affect real business processes. This domain knowledge can be useful for people interested in cybersecurity, governance risk and compliance, enterprise SaaS, or privacy engineering.
The company describes its working model as remote-friendly and emphasizes ownership, clear communication, customer focus, and fast but reliable delivery. Its public team information identifies Munich, Berlin, London, and remote colleagues across Europe. This can provide exposure to international product and customer needs. However, remote eligibility depends on the country and vacancy; an applicant in India should not assume that a European remote role permits employment from India.
As a growing private company, Secfix may offer broad responsibilities and direct product impact, but candidates should assess the team structure and role scope carefully. Ask about engineering practices, mentoring, release ownership, on-call duties, career paths, compensation, and country-specific benefits before accepting an offer.
Fresher Openings
1 live roles
Salary Insights
Based on currently open fresher roles
Average Annual Salary
20,000.0 – 32,000.0 LPA
Secfix Hiring Backend Engineer – GTM Engineering in India | Remote
20,000 - 32,000 LPA (USD)
Interview Experience
Hiring Process
Secfix publishes vacancies through its Ashby careers portal and may also use a future-talent pool. It does not publish one fixed interview sequence for every role. A typical process may include these stages:
1. Application: Select a vacancy on the official careers portal and submit your resume and requested details. Check the eligible countries, language requirements, work arrangement, and seniority.
2. Initial review: The recruitment team reviews your background and may contact you to discuss motivation, relevant experience, salary expectations, location, and availability.
3. Recruiter or introductory conversation: Candidates may speak with a recruiter or team member about the company, role scope, and mutual expectations.
4. Role-specific interview: Engineering applicants may discuss software design, coding, APIs, cloud systems, security, integrations, and product thinking. Security and GRC applicants may discuss audit frameworks, risk assessment, control design, and customer advisory work. Commercial roles may include sales or customer scenarios.
5. Practical assessment or team discussion: Depending on the position, candidates may complete a task, case study, technical exercise, or additional conversations with future colleagues.
6. Final discussion and offer: Selected candidates receive details about compensation, employment entity, country, work mode, and proposed start date.
7. Pre-joining checks: The company states that background checks are conducted for new hires where legally permitted. Candidates may also be asked to complete employment documentation and confidentiality agreements.
The exact stages and assessment format vary by vacancy. Ask the recruiter to confirm the interview plan and whether the role can be performed from your country.
1. Application: Select a vacancy on the official careers portal and submit your resume and requested details. Check the eligible countries, language requirements, work arrangement, and seniority.
2. Initial review: The recruitment team reviews your background and may contact you to discuss motivation, relevant experience, salary expectations, location, and availability.
3. Recruiter or introductory conversation: Candidates may speak with a recruiter or team member about the company, role scope, and mutual expectations.
4. Role-specific interview: Engineering applicants may discuss software design, coding, APIs, cloud systems, security, integrations, and product thinking. Security and GRC applicants may discuss audit frameworks, risk assessment, control design, and customer advisory work. Commercial roles may include sales or customer scenarios.
5. Practical assessment or team discussion: Depending on the position, candidates may complete a task, case study, technical exercise, or additional conversations with future colleagues.
6. Final discussion and offer: Selected candidates receive details about compensation, employment entity, country, work mode, and proposed start date.
7. Pre-joining checks: The company states that background checks are conducted for new hires where legally permitted. Candidates may also be asked to complete employment documentation and confidentiality agreements.
The exact stages and assessment format vary by vacancy. Ask the recruiter to confirm the interview plan and whether the role can be performed from your country.
FAQ
Secfix is a German cybersecurity software company that develops a governance, risk, and compliance platform. Its software helps businesses manage security controls, collect audit evidence, assess risks, maintain policies, review vendors, and monitor devices. Secfix also provides access to security and compliance expertise. Its customers include startups, small and medium-sized businesses, and mid-market organizations working toward or maintaining security and privacy requirements.
Secfix was founded in 2021 by Fabiola Munguia, Grigory Emelianov, and Branko Džakula, according to the company's About page and company history. It began with a focus on simplifying security compliance for smaller businesses and has expanded its platform to cover more frameworks and security workflows. The company is privately held and registered in Germany as Secfix GmbH. Check current role details.
Secfix GmbH is registered in Munich, Germany. Its published legal address is c/o St. Oberholz, Erika-Mann-Straße 25, 80636 Munich. The company also identifies Berlin and London as team locations and says it works with colleagues remotely across Europe. Some third-party directories show a Berlin address, but the official imprint is the best source for the registered company address. Check current role details.
LinkedIn and several company directories place Secfix in the 11–50 employee range. Earlier recruitment material described a team of around 18 people, but that figure may no longer be current. The company does not publish an audited employee count in the sources reviewed. Candidates should ask about the size of the specific team, reporting structure, and colleagues they would work with.
The Secfix platform helps organizations manage security compliance work in one place. It supports evidence collection, automated checks, risk assessments, vendor reviews, policy management, employee compliance, asset management, and device monitoring. Integrations with cloud services, identity providers, ticketing tools, HR systems, and mobile device management platforms help collect information from existing business systems and reduce manual audit preparation. Check current role details.
Secfix publicly identifies integrations with AWS, Google Cloud, Microsoft Azure, Microsoft 365, Azure AD, Google Workspace, Jira, GitHub Issues, ClickUp, Personio, CharlieHR, BambooHR, Intune, Jamf, JumpCloud, and Kandji. Its security documentation also describes APIs, cloud infrastructure, automated security testing, encryption, and infrastructure-as-code practices. The company does not publish a complete programming-language stack, so applicants should confirm the exact tools in each vacancy.
Yes. Secfix has advertised engineering and product engineering opportunities through its careers portal and third-party job boards. Relevant work can include SaaS product development, integrations, cloud infrastructure, security engineering, and AI-supported compliance workflows. Open positions change over time. Candidates should check the official Ashby careers page for current vacancies, required experience, approved work countries, and the technologies used by the hiring team.
Secfix has previously maintained a future-talent pool, which allows interested candidates to express interest in future opportunities. This does not guarantee a current internship or graduate vacancy. Freshers should monitor the official careers page and build practical skills in software development, cloud services, APIs, databases, and information security. Projects involving secure login, access controls, audit logs, or compliance workflows can help demonstrate relevant knowledge.
A future-talent pool has appeared on Secfix's careers platform, but it should not be treated as a confirmed internship program. Internship openings depend on team needs and may not be available throughout the year. Students should check the current careers page for roles explicitly marked as internships or student positions. Before applying, confirm the location, duration, academic requirements, and whether the role is paid.
Secfix's official company information identifies Munich, Berlin, and London as team locations, along with remote colleagues across Europe. Its registered legal address is in Munich, Germany. Remote hiring is country-dependent, and a role advertised as remote in Europe may not accept applicants from every country. The public sources reviewed did not confirm a permanent Secfix office in India. Check current role details.
Secfix describes its work model as remote by design and says it supports asynchronous, flexible workflows. Current and recent job boards show remote and hybrid roles across several European countries. However, remote work does not automatically mean worldwide hiring. Employment rules, payroll, tax, and local legal requirements can limit eligible countries. Applicants should ask whether the specific vacancy can employ someone in their country before proceeding.
Secfix uses an online careers portal and does not publish one fixed interview process for every role. Candidates may complete an application review, recruiter conversation, role-specific interviews, and a practical task or case discussion. Engineering interviews may cover software design, APIs, cloud systems, and security. GRC interviews may focus on audit frameworks and risk management. Ask the recruiter to confirm the number of rounds and preparation topics.
Qualifications depend on the role. Engineering positions may ask for computer science, software engineering, or equivalent practical experience. Security and GRC roles may require knowledge of ISO 27001, SOC 2, TISAX, GDPR, risk assessments, or audit processes. Some customer-facing positions may require German or another European language. Always review the vacancy for its exact education, experience, language, and work authorization requirements.
Third-party recruitment profiles list benefits such as a company laptop, stock options, flexible working hours, home-office support, private health insurance, and remote work. These benefits may vary by country, role, contract, and date. Candidates should not assume every item applies to every employee. Request the current local benefits summary and check the written offer for insurance, leave, equity terms, equipment, and other entitlements.
The public company information reviewed identifies Munich, Berlin, London, and remote locations across Europe, but it does not confirm a permanent Secfix office in India. Some remote roles may be open to several European countries, but that does not mean India is an approved work location. Applicants based in India should ask the recruiter whether the company can employ them locally or support a compliant contractor arrangement.
Secfix states that it holds ISO/IEC 27001:2022 certification and TISAX Assessment Level 2. It also states that its SOC 2 Type II controls have been audited, with the report available under NDA. The company describes its GDPR compliance program as part of its information security management system. These statuses are different: SOC 2 is an attestation report and GDPR is a regulation, not a certification.
Yes. Secfix provides software and expert support to help customers prepare for and maintain programs such as ISO 27001 and SOC 2. Its platform supports evidence collection, controls, risk management, policies, and audit preparation. The standards are customer-facing frameworks supported by the product. Separately, Secfix reports its own ISO/IEC 27001:2022 certification and SOC 2 Type II audit status.
TISAX is an information security assessment scheme used in the automotive industry and its supply chain. Companies may need to demonstrate that they protect sensitive information shared by automotive manufacturers and suppliers. Secfix supports customers working toward TISAX requirements and states that it has achieved TISAX Assessment Level 2 itself. Candidates in security or GRC roles may benefit from understanding supplier security assessments and evidence management.
Preparation should match the engineering vacancy. Review programming fundamentals, data structures, APIs, databases, cloud services, testing, and system design. Because Secfix builds security and compliance software, be ready to discuss authentication, authorization, audit trails, data protection, secure coding, and third-party integrations. Prepare examples of systems you built, trade-offs you made, production issues you solved, and how you worked with product or security teams.
Secfix may suit professionals interested in cybersecurity SaaS, governance, risk management, compliance automation, and customer security programs. Its platform covers evidence collection, security controls, vendor risk, policies, monitoring, and audit readiness. The company also works with specialist auditors and security experts. Candidates should ask about the frameworks used by their team, customer responsibilities, certification support, training, and how technical and advisory work are divided.
Visit the careers page linked from the official Secfix website or open its Ashby job board. Search for roles by title and location, then check the required experience, language, employment type, and work arrangement. Tailor your resume to the vacancy and include examples of relevant projects or customer work. Apply through the official portal and confirm country eligibility with the recruiter before investing time in later interview stages.
Secfix describes its culture through customer focus, lean execution, transparency, reliability, ownership, and remote-friendly collaboration. The company says it values simple solutions, clear communication, and delivering quickly without lowering quality or security. Its teams work across Munich, Berlin, London, and other European locations. Candidates should ask about the specific team's planning, documentation, feedback, code review, and support for professional development.
Yes, Secfix's security page states that the company is certified to ISO/IEC 27001:2022 and TISAX Assessment Level 2. It also reports an audited SOC 2 Type II report. These claims have defined evidence and access routes through the company's Trust Center or the ENX Portal. Do not confuse these company credentials with the many other standards that Secfix's software helps customers work toward.
Company Highlights
Global Presence
6+ locations
Technology Stack
AWS, Google Cloud Platform, Microsoft Azure, Microsoft 365 & more
Work Mode
Secfix describes itself as remote by design, with teams in Munich, Berlin, London, and across Europe.
Hiring Trends
Actively hiring freshers
Team Size
LinkedIn and several company directories list 11–50 employees. This is a third-party range, not an audited headcount. The company has described its team as approximately 18 people in earlier recruitment material.
Benefits & Work Culture
Secfix presents its culture around customer focus, lean product building, transparency, reliability, ownership, and remote work. The company says it designs workflows for asynchronous collaboration and flexible work. These principles are relevant to a software business serving customers across Europe, where product teams must communicate clearly across locations and work with colleagues in engineering, security, audit, and customer-facing functions. The product domain can make daily work cross-functional. Engineers build tools that support evidence collection, risk tracking, policy management, vendor assessments, employee compliance, and security monitoring. Product decisions need input from auditors and information security specialists because software workflows must reflect real control requirements. Developers may also work with customer systems such as AWS, Google Cloud, Microsoft Azure, identity platforms, HR software, ticketing tools, and device management services. Secfix's public security page describes a structured approach to secure software development. It refers to peer review, automated checks before deployment, threat modelling for significant changes, static and dynamic security analysis, dependency scanning, vulnerability remediation targets, and independent penetration testing. This indicates that security is not only the product category but also a stated part of the company's internal engineering process. The company has identified teams in Munich, Berlin, London, and remote locations across Europe. Some job boards show remote and hybrid vacancies across several European countries. This does not mean every role is fully remote or that applicants can work from any country. Candidates should confirm the employing entity, permitted work country, office attendance, time zone, and travel requirements for each vacancy. Secfix describes a close-knit team and values people who take responsibility and communicate openly. As with any growing company, the actual experience may differ by manager and function. Applicants should ask about team size, code review, planning, documentation, feedback, learning budgets, and how the company supports career development.
- Company laptop, listed in third-party recruitment profiles; confirm current eligibility.
- Company stock options, listed in third-party recruitment profiles; subject to plan terms.
- Flexible working hours, as described in recruitment profiles.
- Remote-work arrangements for eligible roles and approved countries.
- Home-office support or equipment for eligible employees.
- Private health insurance, listed in third-party profiles; local terms may vary.
- Remote-first and asynchronous working practices described by the company.
- Professional development through work with cybersecurity and compliance specialists.
- Exposure to enterprise SaaS product development and customer security requirements.
- Cross-functional collaboration with engineers, auditors, CSMs, and security experts.
- Opportunity to work with international customers across Europe.
- Experience with cloud, identity, HR, ticketing, and device-management integrations.
- Potential equity participation through stock options, subject to grant and vesting terms.
- Learning opportunities in ISO 27001, SOC 2, TISAX, GDPR, NIS2, and DORA.
- Role-specific benefits and leave according to the local employment agreement.
More About Secfix GmbH
Secfix GmbH is a privately held German technology company founded in 2021 and headquartered in Munich. It develops a software platform that helps startups, small and medium-sized businesses, and mid-market organizations manage information security and regulatory compliance. Its work sits at the intersection of cybersecurity, enterprise software, governance, risk management, and audit readiness.
The Secfix platform is designed to reduce manual compliance work. It brings together evidence collection, control tracking, risk assessments, policy management, vendor reviews, employee compliance, asset management, and device monitoring. Integrations with cloud providers, identity platforms, ticketing tools, HR systems, and mobile device management products help collect information from systems that businesses already use. Secfix also combines software automation with specialist support, including CISO-as-a-Service and audit expertise.
The company supports programs and frameworks including ISO/IEC 27001, SOC 2, TISAX, GDPR, NIS2, DORA, ISO 27701, ISO 27018, and ISO/IEC 42001. These are standards and regulatory frameworks that customers may use or work toward; they should not be confused with certifications held by Secfix itself. Secfix separately states that it holds ISO/IEC 27001:2022 certification and TISAX Assessment Level 2, and that its SOC 2 Type II controls have been audited.
For software job seekers, Secfix offers a specialist product environment where security, automation, integrations, and customer trust shape engineering decisions. Relevant work areas can include SaaS product engineering, backend and frontend development, cloud infrastructure, identity and access management, API integrations, security engineering, data workflows, AI-assisted compliance, and product design. The company's security policy describes secure development practices such as peer review, automated security checks, dependency scanning, threat modelling, and recurring penetration testing.
Secfix identifies Munich, Berlin, London, and remote locations across Europe as part of its team footprint. Its current public careers portal is hosted on Ashby. Roles may be remote or hybrid depending on country, function, and seniority. The company does not list a confirmed India office in the public sources reviewed, so applicants based in India should check whether a particular vacancy accepts applicants from India and supports employment there.
The Secfix platform is designed to reduce manual compliance work. It brings together evidence collection, control tracking, risk assessments, policy management, vendor reviews, employee compliance, asset management, and device monitoring. Integrations with cloud providers, identity platforms, ticketing tools, HR systems, and mobile device management products help collect information from systems that businesses already use. Secfix also combines software automation with specialist support, including CISO-as-a-Service and audit expertise.
The company supports programs and frameworks including ISO/IEC 27001, SOC 2, TISAX, GDPR, NIS2, DORA, ISO 27701, ISO 27018, and ISO/IEC 42001. These are standards and regulatory frameworks that customers may use or work toward; they should not be confused with certifications held by Secfix itself. Secfix separately states that it holds ISO/IEC 27001:2022 certification and TISAX Assessment Level 2, and that its SOC 2 Type II controls have been audited.
For software job seekers, Secfix offers a specialist product environment where security, automation, integrations, and customer trust shape engineering decisions. Relevant work areas can include SaaS product engineering, backend and frontend development, cloud infrastructure, identity and access management, API integrations, security engineering, data workflows, AI-assisted compliance, and product design. The company's security policy describes secure development practices such as peer review, automated security checks, dependency scanning, threat modelling, and recurring penetration testing.
Secfix identifies Munich, Berlin, London, and remote locations across Europe as part of its team footprint. Its current public careers portal is hosted on Ashby. Roles may be remote or hybrid depending on country, function, and seniority. The company does not list a confirmed India office in the public sources reviewed, so applicants based in India should check whether a particular vacancy accepts applicants from India and supports employment there.
Awards
- Fabiola Munguia, Secfix CEO and co-founder, was named to Forbes 30 Under 30 in 2024; this is an individual founder recognition, not a company award.
- Secfix reports venture funding of approximately US$17 million on its About page; funding is company financing, not an award.
- Secfix is backed by investors including Octopus Ventures and Neosfer, according to company and recruitment materials; investor backing is not an award.
- Secfix says it has supported hundreds of companies in Europe; this is a company-reported customer reach statement, not an award.
- Secfix reports a 100% audit success rate on its About page; this is a company-reported performance claim, not an independently verified award.
- Secfix reports a 100% customer satisfaction score on its About page; the measurement basis is not detailed publicly and it is not an award.
- Secfix has been described in technology and business press as a European compliance automation startup; media coverage is not an award win.
- No independently verified company-wide workplace award was identified in the reviewed public sources.
- No additional independently verified corporate award wins were identified; do not publish nominations or customer awards as Secfix wins without checking the awarding body.
Certifications
- ISO/IEC 27001:2022 – Secfix states that it is certified; certificate evidence is available through its Trust Center.
- TISAX Assessment Level 2 (AL2) – Secfix states that it is certified; participant information is available through the ENX Portal.
- SOC 2 Type II – Secfix states that its controls have been audited and that the report is available under NDA; SOC 2 is an attestation report, not an ISO-style certification.
- GDPR – Secfix states that it is compliant and describes its DPO, processing records, data processing agreement, and sub-processor list; GDPR is a regulation, not a certification.
- ISO/IEC 27017 – listed by Secfix as an independent attestation maintained by its cloud providers, not a certification held by Secfix itself.
- ISO/IEC 27018 – listed by Secfix as an independent attestation maintained by its cloud providers, not a certification held by Secfix itself.
- SOC 1, SOC 2, and SOC 3 cloud-provider attestations – Secfix attributes these to its infrastructure providers; do not present them as Secfix corporate reports.
- PCI DSS and BSI C5 – listed as independent attestations of cloud providers; not represented as Secfix's own certifications.
- ISO/IEC 27701, ISO/IEC 42001, ISO 9001, and ISO 27018 – frameworks that Secfix supports for customers or describes as product-related offerings; support does not mean Secfix itself is certified to each one.
- OWASP ASVS, OWASP Top 10, SANS Top 25, and MITRE ATT&CK – security references used to benchmark aspects of the application security program; these are not company certifications.
Secfix careers may interest software engineers, cybersecurity professionals, product specialists, and compliance experts who want to build technology for information security and regulatory compliance. Secfix GmbH is a German SaaS company that helps organizations automate security workflows, prepare for audits, and maintain compliance programs. Its platform combines software integrations with specialist security and audit support.
What does Secfix do?
Secfix develops a governance, risk, and compliance platform for startups, small businesses, and mid-market organizations. The product helps teams manage security controls, evidence collection, risk assessments, policies, vendor reviews, employee compliance, assets, and device monitoring. It connects with cloud providers, identity systems, HR applications, ticketing tools, and device management platforms to reduce manual work and make compliance status easier to track.
The company supports customer programs involving ISO 27001, SOC 2, TISAX, GDPR, NIS2, DORA, ISO 27701, ISO 27018, and ISO/IEC 42001. These are customer-facing standards and regulatory frameworks. Secfix separately reports that it holds ISO/IEC 27001:2022 certification and TISAX Assessment Level 2, and that its SOC 2 Type II controls have been audited. Candidates should understand the difference between a framework supported by the product and a certification held by the company itself.
Software jobs at Secfix
Secfix jobs can involve SaaS engineering, backend services, frontend applications, cloud infrastructure, integrations, identity and access management, security engineering, product design, and data workflows. Developers work on software that connects to customer systems and handles sensitive security information. This makes API design, access control, reliability, data quality, audit trails, and secure development important topics.
The company publicly lists integrations with AWS, Google Cloud, Microsoft Azure, Microsoft 365, Azure AD, Google Workspace, Jira, GitHub Issues, ClickUp, Personio, CharlieHR, BambooHR, Microsoft Intune, Jamf, JumpCloud, and Kandji. These integrations provide useful context for the product ecosystem, but they should not be mistaken for a complete internal programming-language or framework list. Candidates should review each engineering vacancy for its exact stack.
Cybersecurity and GRC careers
Secfix also hires or works with professionals who understand information security, audit preparation, risk management, privacy, and compliance. Relevant topics include ISO 27001 controls, SOC 2 trust services criteria, TISAX requirements, GDPR, NIS2, DORA, vendor risk, incident response, and security questionnaires. These roles may suit security analysts, GRC specialists, auditors, information security leads, and customer-facing compliance experts.
Secfix jobs in Germany and Europe
Secfix is registered in Munich, Germany, and identifies Munich, Berlin, London, and remote locations across Europe as part of its team footprint. Current vacancies may be remote or hybrid depending on the role and country. Some positions require German language skills, while others may be English-speaking. The public information reviewed does not confirm an India office. Candidates based in India should check whether the employer can support work from India before applying to a Europe-remote vacancy.
Freshers and early-career opportunities
Freshers can monitor the official careers page and future-talent pool for suitable openings. A future-talent listing has previously described the company's team and values, but it is not the same as a guaranteed internship or graduate program. Early-career applicants can prepare by learning programming fundamentals, web development, databases, cloud services, secure coding, and basic information security. Projects involving an API, role-based access, audit logs, or a simple compliance checklist can demonstrate relevant skills.
Experienced professional opportunities
Experienced professionals may explore product engineering, engineering management, security engineering, GRC, information security, product design, customer success, and commercial roles. Strong applicants should explain how they have delivered reliable software, managed customer or audit requirements, improved security controls, or worked across teams. For engineering roles, prepare examples involving architecture, testing, code review, observability, incident handling, and secure deployment.
Work culture and benefits
Secfix describes its culture as customer-focused, transparent, ownership-driven, and remote-friendly. It emphasizes simple solutions, fast but reliable delivery, and asynchronous collaboration. Public job-board profiles list benefits such as a company laptop, stock options, flexible hours, home-office support, private health insurance, and remote work. Benefits can vary by country, role, and contract, so applicants should confirm the current local package with the recruiter.
Secfix interview process
The interview process depends on the vacancy. Candidates may complete an application review, recruiter conversation, role-specific interviews, a practical exercise, and a final discussion. Engineering interviews may cover coding, software design, cloud platforms, APIs, security, and integrations. GRC interviews may focus on audit frameworks, risk assessments, controls, and customer communication. Ask the recruiter about the number of rounds, preparation topics, and assessment format.
How to apply for Secfix careers
Visit the official Ashby careers portal linked from the Secfix website. Search by job title and location, then check seniority, language, employment type, and work arrangement. Tailor your resume to the role and include clear examples of projects and results. Use the official application page and verify any recruiter communication. Before accepting an offer, confirm the employing country, salary, benefits, notice period, and remote-work rules in writing.
Is Secfix a good fit for software professionals?
Secfix may suit people interested in cybersecurity SaaS, compliance automation, secure integrations, and products that help businesses build trust. It offers a specialist domain where engineering, security expertise, and customer needs meet. The best opportunity depends on the team and role. Review current openings carefully and ask about product ownership, technical practices, mentoring, and career progression.
