Application Security Engineer (AWS)

Location: Hamburg or Berlin, Germany

Salary: €65,000–€75,000 per year

Company

Europe-based e-commerce company operating at the intersection of fashion and technology, focused on personalizing and simplifying online shopping.

What you will do

• Conduct regular penetration tests and manual secure code reviews.
• Advise on the setup and maintenance of applications and infrastructure hosted in AWS and Kubernetes.
• Triage and respond to monitoring events and emerging security threats.
• Optimize and automate security auditing processes, including attack infrastructure, Python scripts, and security scanning in GitLab CI.
• Participate in SOC incident response activities, including occasional 24/7 on-call support.
• Collaborate with security engineers, developers, and IT teams to implement security best practices.

Requirements

• At least 2 years of application security experience, including at least 1 year in a junior-level position.
• Strong experience with threat modeling, penetration testing, and manual secure code reviews.
• Fluency in Python for security automation, tooling, and code assessment.
• Hands-on experience securing modern cloud environments using AWS or GCP.
• Ability to manage complex technical security projects and coordinate dependencies and deliverables across engineering teams.

Nice to have

• OSCP, OSWP, or similar security certifications.
• Knowledge of Laravel or PHP and ability to read JavaScript or Go.
• Experience with incident response, web application firewalls, CDN providers, or GitLab CI/CD pipelines.

Culture & Benefits

• Flat hierarchies, direct communication, pragmatic decisions, and clear ownership.
• Inclusive environment that values acceptance, diverse perspectives, and fairness.
• Team lunches, after-work drinks, company events, and informal opportunities to connect.
• Additional employee perks are available through the company benefits program.

Hiring process

• Apply online through the career page.
• The hiring team will respond after reviewing the application.