Application Security Engineer

Role Overview

• Operate application security tools (SAST, DAST, SCA) and integrate them into CI/CD pipelines (Azure DevOps, GitLab, Jenkins)
• Collaborate with development teams to remediate vulnerabilities and implement secure coding practices
• Identify technical security risks in applications, APIs, and support threat modeling activities
• Enforce security quality gates, ensuring compliance with regulatory standards (SOX, MAR, REMIT)
• Analyze security incidents, including log reviews and code analysis
• Deliver targeted application security awareness and training sessions
• Assess secure solution designs and third-party integrations

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field
• Certifications like OSCP, eWPT, Burp Suite Certified Practitioner are a plus
• Minimum 5 years of experience in application security or software development
• Hands-on experience with security tools and CI/CD environments (Azure DevOps, Jenkins, GitLab)
• Ability to read and understand code (Java, Python, .NET) and support vulnerability remediation
• Fluent English; German is an advantage
• Strong analytical, problem-solving, and communication skills

Tech Stack

• Azure
• Java
• Jenkins
• Python
• .NET

Benefits

• Flexible working hours
• Meal allowances
• Internet Compensation
• Training courses
• Gym Coverage
• Health Insurance