Triage and remediate CVEs across frontend (pnpm/npm) and backend (Java/Maven) dependencies on a continuous basis
Perform root-cause analysis for security bugs across the full stack; implement well-tested fixes
Identify and harden vulnerable code paths: XSS, CSRF, injection attacks, secrets exposure, broken authentication, insecure direct object references
Extend GitLab scanning coverage to frontend build artefacts alongside existing backend pipeline
Review security-sensitive changes in collaboration with tech leads and other developers
Handle minor bugfixes across the full stack to maintain team velocity
Contribute to security incident post-mortems; document findings and mitigations

Solid experience with TypeScript/JavaScript and Java
Hands-on experience with Vue 3 or a comparable modern frontend framework; Vue 3 / Nuxt proficiency strongly preferred
Practical understanding of web security fundamentals: XSS, CSRF, injection attacks, dependency vulnerabilities, broken authentication, secrets management
Ability to read CVE advisories and translate them into concrete code or dependency changes
Solid knowledge of container security: Docker image hardening, Kubernetes security contexts
Experience with Git workflows, GitLab CI/CD pipelines, and package managers (Maven and pnpm both in active use)
Structured approach to problem-solving with a habit of documenting findings
Bonus: Vuetify component library experience, SAST/DAST tooling (Snyk, SonarQube, OWASP ZAP), Content Security Policy configuration or pnpm workspace experience

Great creative freedom and a variety of opportunities for further development in a very trusting and appreciative environment
The choice between different work models (office or hybrid) with flexible working hours, a working time account, overtime regulations and modern and ergonomically equipped workstations
State-of-the-art collaboration tools for efficient hybrid working (e. g., Stackoverflow for Teams)
A family-friendly and relaxed atmosphere where ideas are created together with the best colleagues on earth!
Unlimited employment contracts, company pension plan, bonus payments, a future leadership program, development budgets and LinkedIn Learning, sports events, childcare support, cafeteria, health campaigns, bring your dogs to work, sufficient and free parking spaces, bicycle leasing, IT hardware leasing, tire changing service, company and sports events, team excursions and team challenges, parcel service, drinks, fresh fruit and vegetables, cookies and much more

Full-Stack Security Developer – External

Key skills