Senior Full Stack Developer (TypeScript)

YOUR MISSION As a member of our Data team, you'll take full ownership of the systems that turn raw data into decisions—for our product, our internal teams, our customers, and our investors. You won't just maintain dashboards; you'll own the pipeline end to end, from ingestion to the numbers people actually act on. In your first few months, you might: * Take ownership of our dbt pipeline, improving our data models so they're reliable, well-tested, and easy to build on. * Maintain and extend our Looker setup, and ship new dashboards and reports that customers and other stakeholders depend on. * Strengthen our data pipeline from Postgres to BigQuery, and build custom Python scripts to automate the flows that keep our warehouse fresh. * Integrate our data warehouse with external tools like Salesforce or ActiveCampaign, so the right data reaches the teams that need it. HOW WE BUILD: OUR ENGINEERING CULTURE We believe in a calm, collaborative, and productive engineering environment. We trust our people and give them the autonomy to do their best work. Our approach includes: * Ownership Over Handoffs: On a small data team, you own your work from ingestion to dashboard. We trust you to make decisions and run with them. * Quality by Default: We treat our data models like production code—tested, version-controlled, and documented—so the numbers we serve are ones we can stand behind. * DevOps Mindset: We automate the boring parts. Pipelines, syncs, and checks are powered by third-party tools or GitHub Actions so the team can focus on the work that needs a human. * Collaboration & Transparency: We value open discussion, constructive reviews, and a culture where the best idea wins, regardless of who it comes from. * AI-Native by Default: We work heavily with Claude Code and other AI tools, and they're a core part of how we build—from writing models and scripts to debugging pipelines and exploring data. We expect everyone on the team to use them fluently and keep getting better at it. YOUR PROFILE We're looking for an experienced data practitioner who likes owning the full stack of an analytics platform. You'll be a great fit if you have: * Significant professional experience building and maintaining data models with dbt and writing advanced SQL. * Solid Python skills for data syncing, automation, and general scripting. * Hands-on experience with a cloud data warehouse such as BigQuery, and comfort working with source databases like Postgres. * Experience building dashboards and serving data to non-technical stakeholders (a strong command of Looker is a big plus). * Strong, hands-on familiarity with AI coding tools—especially Claude Code—and a habit of using them as part of your daily workflow. * A pragmatic approach to problem-solving and a high sense of ownership, feeling comfortable driving projects independently. * Excellent communication skills in English. BONUS POINTS FOR (NICE-TO-HAVES): * Experience with reverse ETL or integrating a data warehouse with tools like ActiveCampaign or Salesforce. * Experience building and maintaining CI/CD or automation pipelines (e.g. GitHub Actions). * Experience preparing data and reporting for external audiences such as customers or investors. * An interest in data engineering best practices, pipeline reliability, and infrastructure-as-code. WHY US? * Competitive Compensation: A competitive salary above the market average. * Work-Life Balance: Choose to work 100% remotely or from our modern office in Berlin. We offer flexible working hours to fit your life. * Top-Notch Equipment: A new MacBook Pro to ensure you have the best tools for the job. * A Great Team: Regular company off-sites and team events that connect us as people, not just colleagues. * Job Security: A permanent contract in a stable, well-funded company. ABOUT US Cosuno – Revolutionizing construction through technology. We are Cosuno – a fast-growing tech startup that is making the construction industry more efficient and transparent with our digital platform for tenders and procurement processes. Our goal: to solve the most complex challenges in the industry with innovation and simplicity. Why Cosuno? Artificial intelligence is the key to our solution: it analyzes millions of price data points and helps construction companies create precise and efficient bids. This not only saves our customers time but also helps them avoid unnecessary costs. But for us, it's not just about technology – it's about the people who drive it. At Cosuno, you will work with creative minds who are reshaping the construction industry. We believe in diversity because we know that the best ideas come from different perspectives. An integrative and inclusive work environment is a matter of course for us. Join us – Build the future of construction.

YOUR MISSION You'll take full ownership of information security, compliance, and IT governance at Cosuno. You'll build and run our ISMS, lead us through ISO 27001 certification, and become the face of Cosuno's security posture toward enterprise customers and auditors. This is a senior individual contributor role with genuine end-to-end ownership. You won't be managing a team. You'll be the expert doing the work, backed by an Engineering team that implements technical changes you define, and with direct sponsorship from the CTO. WHAT YOU'LL OWN ISMS & ISO 27001 * Lead our ISO 27001 certification from gap analysis through audit, and run the ISMS afterwards: risk management, Statement of Applicability, internal audits, management reviews, and the annual control cycle * Write and maintain our security policies, making sure they describe how we actually work rather than how a template says we should Customer trust & audits * Own responses to enterprise security questionnaires and RFIs, helping Sales close deals faster * Represent Cosuno in supplier audits by enterprise customers: you'll face customer CISOs and auditors independently, in German or English as needed Data protection (GDPR) * Own the operational side of GDPR: drafting and negotiating DPAs (AVVs), managing our subprocessor list and notifications, running vendor security reviews, and supporting DSARs * Work with our external counsel and DPO where legal depth is required, while handling the day-to-day yourself IT governance & access management * Own our identity and access management via JumpCloud (MDM, SSO, device policies), including joiner/mover/leaver processes and periodic access reviews * Define our IT security baseline: device hardening, SaaS tooling governance, security awareness training HOW WE WORK * High autonomy, high impact: You own these domains end to end. These responsibilities currently sit with our leadership team; the mandate is to take them over completely, not to assist. * Compliance as a product: We treat security and compliance as a genuine part of how we build trust with enterprise customers, not as a checkbox exercise. * You define, Engineering implements: When a policy requires technical changes (logging, backup configuration, access controls), you specify what's needed and our Engineering team builds it. You need to understand our stack well enough to have that conversation credibly, but you don't need to write the code yourself. * Pragmatic, not bureaucratic: We're 100 people, not 10,000. We want lean, largely automated processes and modern compliance tooling, not committees. * AI-first by default: We expect you to work heavily with AI tools such as Claude Code to draft policies, answer security questionnaires, analyze audit requirements, and build lightweight automations. The goal is a compliance function that runs on smart processes and AI leverage, not headcount. If your instinct when facing a 300-question security questionnaire is to build a system rather than start typing, you'll fit right in. YOUR PROFILE You'll be a great fit if you have: * Full professional fluency in German and English. A significant part of our compliance and customer-facing security work is conducted in German, and this is a firm requirement. * Deep, hands-on ISO 27001 experience. You've built or run an ISMS before, ideally leading a company through certification. You know the Annex A controls and how companies actually implement them, and you can talk to an auditor without a script. * Operational GDPR expertise. You can draft a DPA, you know your Art. 28 from your Art. 32, and you've handled subprocessor management, vendor reviews, and DSARs in practice. * Genuine technical literacy. You understand how a modern SaaS product is built and run (cloud infrastructure, CI/CD, SaaS tooling). You can read an architecture diagram, ask engineers the right questions, and write a System Development Policy that matches reality. * Fluency with AI tools in your daily work. You already use tools like Claude, Claude Code, or similar as a core part of how you get things done, whether that's drafting a policy, working through a questionnaire, or automating a recurring task. You see AI as a force multiplier for a one-person function, and you're eager to push it further. * Independence in front of customers. You're comfortable being the sole security counterpart in an enterprise audit or a customer CISO call. * The organisational maturity to run multiple threads in parallel: a certification project, an audit, three questionnaires, and a DPA negotiation, without things slipping. Bonus points for: * ISO 27001 Lead Implementer / Lead Auditor certification, or CIPP/E * Experience with compliance automation tooling (Kertos, Vanta, Drata, Secfix, or similar) * Experience building your own automations with AI (agents, scripts, or workflows for questionnaires, evidence collection, or vendor reviews) * Experience administering an MDM / IdP (JumpCloud, Okta, Jamf, or similar) * Experience with other frameworks relevant to our customers (SOC 2, TISAX, BSI C5, NIS2) * Prior experience at a B2B SaaS company selling to enterprise customers WHY US? * Real ownership: You'll build the security and compliance function of a Series B company from a strong foundation, and shape it your way. * Competitive compensation: A salary above the market average, reflecting the seniority of the role. * Work-life balance: Work 100% remotely or from our modern office in Berlin, with flexible working hours. * Top-notch equipment: A new MacBook Pro to ensure you have the best tools for the job. * A great team: Regular company off-sites and team events that connect us as people, not just colleagues. * Job security: A permanent contract in a stable, well-funded company. ABOUT US Cosuno – Revolutionizing construction through technology. We are Cosuno – a fast-growing tech startup that is making the construction industry more efficient and transparent with our digital platform for tenders and procurement processes. Our goal: to solve the most complex challenges in the industry with innovation and simplicity. Artificial intelligence is the key to our solution: it analyzes millions of price data points and helps construction companies create precise and efficient bids. This not only saves our customers time but also helps them avoid unnecessary costs. But for us, it's not just about technology – it's about the people who drive it. At Cosuno, you will work with creative minds who are reshaping the construction industry. We believe in diversity because we know that the best ideas come from different perspectives. An integrative and inclusive work environment is a matter of course for us. Join us – Build the future of construction.