TL;DR
- Secfix describes itself as a “remote-only company” on 15 of its 16 live adverts, and four of those adverts require 2-3 days a week in its new Munich sales office. Both statements are current.
- Its website sells async working. Its adverts state that it “cannot support 100% asynchronous work”. That contradiction is the most useful thing on the board.
- The country list is hard and narrow: Germany, Austria, Poland, the UK or Turkey, or within two hours of German time. Spain, Portugal, Italy, France and the Nordics are outside it.
- German at C1 or C2 is a stated requirement on nine of the 16 adverts. Several roles run as English and German twins, so check for the pair.
Secfix had 16 adverts live on its Ashby board on 7 September 2026. Fifteen of them contain a paragraph that begins “Please note: We are an equal-opportunity employer and remote-only company.”
Four of those same 16 adverts offer this under What We Offer: “Hybrid-Flexible Work: 2-3 days in our new sales office in Munich and added flexibility where needed.”
Both things are true at once, and reading them side by side tells you more about Secfix than any careers page could.
What is actually going on here?
Secfix builds compliance automation software, helping European companies get and keep ISO 27001, GDPR, TISAX and SOC 2 certifications. It was founded in September 2021 by Fabiola Munguia, Grigory Emelianov and Branko Džakula, and has raised a $12M Series A backed by Alstin Capital, Neosfer (Commerzbank) and Bayern Capital.
The four hybrid adverts are all sales roles: Account Executive for Mid-Market, Account Executive for SMB, Business Development Representative for Mid-Market, Business Development Representative for SMB. Their Ashby workplace type is set to Hybrid, their location is Munich, and one of them adds “Relocation to Munich provided”.
This is not hypocrisy. It is what tends to happen when a remote company starts selling into German enterprise accounts, where buyers expect people in rooms. Secfix’s homepage now says “Made in Germany. Secfix has offices in Berlin and Munich.”
But it does mean a jobseeker needs to work out which side of the line their function sits on before applying, because the company’s self-description and the specific advert can point in opposite directions.
| Function | Working model on the current board |
|---|---|
| Sales (AE and BDR, German-speaking) | Hybrid, 2-3 days in Munich |
| Business development (English-speaking) | Remote |
| Engineering, design, product support | Remote |
| Information security, ISO 27001 auditing | Remote |
| Customer success | Remote |
Twelve of the 16 adverts are set to Remote, four to Hybrid. Every one of the 16 is a full-time employment position. None is freelance.
The async contradiction
This is the part worth reading twice.
Secfix’s about-us page lists six company values. Value 06 is “Remote by Design”, explained as: “We design workflows for async, flexible work so talent can thrive anywhere.”
The adverts say something different. Thirteen of them carry this sentence: “As a small fast-growing company, we believe in the need for an in-sync component of daily communication and therefore cannot support 100% asynchronous work.” Two more say the same thing in slightly different words. The full paragraph adds that the team works “in sync using Gather as our virtual office”.
Those two positions cannot both be the working reality. The website is selling async. The adverts are telling you the company runs on synchronous daily communication through a virtual office tool, and that it will not accommodate anyone who needs to work fully asynchronously.
Believe the adverts. They are written by the people doing the hiring, they are more recent, and they are more specific. If you are looking for a genuinely async employer because of caring responsibilities, health, or a timezone that does not fit, Secfix is telling you in writing that it is not that. Our roundup of remote-first companies that actually hire in Europe includes employers where the async claim holds up under the same test.
Which countries can I work from?
Narrower than you would expect from a company that says talent should “thrive anywhere”. There are three location formulas on the board:
- Four adverts: “Remote - Germany, Austria, Poland, the UK or Turkey”
- Five adverts: “Remote (+/- 2hrs from Germany GMT+1)”, or a variant naming the UK, Benelux and Germany
- Two adverts: “Remote (EMEA)”, still under the “only within EU time zones” rule in the boilerplate
Spain, Portugal, Italy, France and the Nordic countries do not appear on any list. Two of the named countries, the UK and Turkey, are outside the EU, so the “EU time zones” phrasing in the boilerplate is about clock hours rather than membership.
If you are reading this from Valencia, Lisbon or Milan, none of the 16 roles names your country, and the plus or minus two hours rule would technically cover Spain and Portugal while the explicit country list does not. That is an ambiguity worth resolving with the recruiter rather than assuming in your favour.
Do I need to speak German?
On nine of the 16 adverts, yes, at a level the company spells out. The wording varies: “Excellent German skills (C2 level) and strong English skills” on some, “German (C1/C2) and English (fluent) is a must for this role” on others, and “C2 German Language is essential” on one of the Munich sales roles.
Here is the practical tip. Several roles run as paired duplicates, one German-speaking and one English-speaking, posted separately:
- ISO 27001 Internal Auditor (German-speaking) and ISO 27001 Internal Auditor
- Product Support Specialist (German-speaking) and Product Support Specialist
- Business Development Representative SMB (German-speaking) and Business Development Representative SMB (English-speaking)
If you only speak English and you see a role you want with “(German-speaking)” in the title, look for the twin before you close the tab. In the BDR case the difference is significant: the German-speaking version is hybrid in Munich, the English-speaking version is remote across Europe.
What does Secfix pay?
It does not say, and it explains why. Fourteen adverts carry this line: “Industry-competitive local salaries. We pay local rates that are at or above the market. We share this philosophy with GitLab.”
No advert on the board shows a salary figure or a band. Local-rate pay means the same job pays differently in Warsaw and in London, so if you are in a lower-cost country the offer will reflect that rather than the company’s highest band. It is a defensible policy, openly stated, and it is also the reason you should have a local market number ready before the first call.
Stated benefits are consistent across the board: 26 days holiday plus local public holidays, a €1,000 annual personal development budget, a remote workspace budget and co-working access, comprehensive health insurance, equity, the latest equipment, and team summits one to two times a year, recently in Costa Brava, the Austrian Alps and Milan.
Does Secfix sponsor visas?
Once, on one advert. The Senior Product Designer posting says: “Local hubs in Munich, Berlin, London. Visa support if you want to relocate.”
No other advert mentions visas, sponsorship or right to work in either direction. As with most small European employers, the safe assumption is that you need existing permission to work in one of the named countries, and the exception has to be negotiated. Our guide to employers open to remote hiring across Europe covers how to raise that early without derailing an application.
Frequently asked questions
Is Secfix remote or hybrid? Both, depending on the function. Twelve of 16 live adverts are remote, four are hybrid in Munich, and all four hybrid roles are in sales.
How many jobs does Secfix actually have open? Fifteen. The sixteenth, “Secfix Future Talent Pool”, is a speculative pipeline form published on 31 May 2024 rather than a live vacancy.
Can I work for Secfix from Spain or Portugal? No advert names either country. The timezone rule would cover both, but the explicit country list does not, so ask before applying.
Is Secfix an async company? Its website says it designs for async work. Its adverts say it cannot support 100% asynchronous work. Take the adverts as the operating reality.
Are roles employment or contract? All 16 postings are set to full-time employment. No freelance or contractor listings appeared on the board.
Sources
- Secfix job board (Ashby,
jobs.ashbyhq.com/secfix), 16 live postings, retrieved 7 September 2026: https://jobs.ashbyhq.com/secfix - Secfix about us page, company values, retrieved 7 September 2026: https://www.secfix.com/about-us
- Secfix homepage, retrieved 7 September 2026: https://www.secfix.com/
- Advert body text, workplace types and location strings retrieved from the Ashby public posting API, 7 September 2026.
All counts in this article are as at 7 September 2026 and will drift as roles open and close.
