3 дня назад
Security Engineer, Product Security Team (AI)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Security Engineer, Product Security Team (AI): Securing web, mobile, and backend applications through application security testing, vulnerability triage, DevSecOps tooling, and threat modeling with an accent on secure-by-design practices, automation, and developer enablement. Focus on reproducing and remediating OWASP Top 10 vulnerabilities, integrating SAST/DAST/SCA into CI/CD pipelines, and applying AI-driven tools to improve security workflows.
Location: Berlin, Germany; hybrid working model with attendance at the Berlin campus 2 days per week
Company
is a global local delivery platform operating in around 65 countries and headquartered in Berlin.
What you will do
- Assess web and mobile applications, review code, and help product teams remediate application-layer vulnerabilities, including OWASP Top 10 issues.
- Triage, validate, reproduce, and route reports from bug bounty and vulnerability disclosure programs.
- Implement and maintain SAST, DAST, and SCA security tooling in CI/CD pipelines.
- Support threat modeling and architectural reviews for new features and microservices using frameworks such as STRIDE.
- Track remediation progress against MTTR and SLA adherence metrics and collaborate with developers on timely fixes.
- Guide software engineers on secure coding standards, library usage, security automation, and AI-driven security tools.
Requirements
- Solid knowledge of web and mobile application security, OWASP Top 10, and basic web/API security architectures.
- Ability to read and understand code in at least one of Java, Python, Go, or TypeScript.
- Experience reproducing application vulnerabilities such as XSS, SQL injection, IDOR, and authentication bypasses using tools such as Burp Suite or OWASP ZAP.
- Basic understanding of CI/CD systems, automated security scanners, cloud computing, Docker, and Kubernetes.
- Interest in using AI-driven tools and automation for security scripts, vulnerability triage, and analysis.
- Strong collaboration skills and an empathetic approach to working with software engineers.
Nice to have
- Experience with bug bounty programs or Capture The Flag competitions.
- Familiarity with OAuth 2.0, OIDC, or SAML.
- Security certifications such as Security+, eJPT, or GWAPT.
Culture & Benefits
- Hybrid work with 2 days per week at the Berlin campus.
- 27 days of annual leave, with an additional day in the second and third years of service.
- €1,000 educational budget, language courses, parental support, and access to Udemy Business.
- Health checkups, meditation, gym access, life and accident insurance, and a corporate pension plan.
- Employee Share Purchase Plan, sabbatical bank, public transportation discount, and meal and food vouchers.
- Relocation support for moving to Berlin.
Hiring process
- Interview preparation resources and an application-based hiring process.
- Accessibility accommodations are available during interviews upon request.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →