Назад
Company hidden
6 дней назад

Junior Application Security Engineer (Cloud Security)

50 000 - 62 000€
Формат работы
hybrid
Тип работы
fulltime
Грейд
junior
Английский
b2
Страна
Germany
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Junior Application Security Engineer (Cloud Security): Protecting online-shop, corporate, and customer systems through penetration testing, code reviews, and security controls with an accent on AWS/Kubernetes infrastructure, automated auditing, and application security assessments. Focus on designing secure systems, scripting security tooling in Python, responding to monitoring events, and participating in incident response with occasional 24/7 on-call duties.

Location: Hybrid in Hamburg, Germany

Salary: EUR 50,000–62,000 per year

Company

hirify.global is a European e-commerce company operating at the intersection of fashion and technology, with a focus on personalized online shopping.

What you will do

  • Conduct regular penetration tests and application security assessments.
  • Perform code reviews and advise on the secure setup and maintenance of applications and infrastructure, usually hosted in AWS and Kubernetes.
  • Triage and respond to monitoring events and participate in incident response activities within the SOC, including occasional 24/7 on-call duties.
  • Optimize and automate security auditing processes, including setting up attack infrastructure, writing Python scripts, and implementing security scanning in GitLab CI.
  • Work closely with security engineers, developers, and IT teams to apply security best practices and respond to emerging threats.

Requirements

  • At least one year of application security experience.
  • Ability to perform active application security assessments and penetration testing.
  • Ability to develop and script using Python.

Nice to have

  • Experience architecting secure systems using threat modeling and security engineering practices.
  • Experience conducting secure code reviews across cloud environments, preferably AWS or GCP; Azure experience is a plus.
  • Experience executing red teaming operations and offensive security strategies.
  • Security certifications such as OSCP or OSWP.
  • Knowledge of Laravel and PHP.
  • Ability to read and understand JavaScript and Go.
  • Experience with incident response activities.
  • Experience with web application firewalls and CDN providers such as Cloudflare or Akamai.
  • Experience with GitLab CI/CD pipelines.

Culture & Benefits

  • Flat hierarchies, direct communication, pragmatic decisions, and clear responsibility.
  • Inclusive environment built around acceptance, inclusion, and diverse perspectives.
  • Team lunches, afterwork drinks, company events, and informal opportunities to connect.
  • Additional employee perks are available through the company benefits program.

Hiring process

  • Apply online through the company career page.
  • Candidate information is handled confidentially according to EEO guidelines.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →