Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
78
Хорошая вакансия
развернуть
Понятная junior-вакансия в продуктовой компании дает практический опыт в облачной безопасности, но периодические дежурства 24/7 могут создавать дополнительную нагрузку.
Кликните для подробной информации
Дежурства 24/7Современный стекПонятные обязанности
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Junior Application Security Engineer (Cloud Security): Protecting online-shop, corporate, and customer systems through penetration testing, code reviews, and security controls with an accent on AWS/Kubernetes infrastructure, automated auditing, and application security assessments. Focus on designing secure systems, scripting security tooling in Python, responding to monitoring events, and participating in incident response with occasional 24/7 on-call duties.
Location: Hybrid in Hamburg, Germany
Salary: EUR 50,000–62,000 per year
Company
hirify.global is a European e-commerce company operating at the intersection of fashion and technology, with a focus on personalized online shopping.
What you will do
Conduct regular penetration tests and application security assessments.
Perform code reviews and advise on the secure setup and maintenance of applications and infrastructure, usually hosted in AWS and Kubernetes.
Triage and respond to monitoring events and participate in incident response activities within the SOC, including occasional 24/7 on-call duties.
Optimize and automate security auditing processes, including setting up attack infrastructure, writing Python scripts, and implementing security scanning in GitLab CI.
Work closely with security engineers, developers, and IT teams to apply security best practices and respond to emerging threats.
Requirements
At least one year of application security experience.
Ability to perform active application security assessments and penetration testing.
Ability to develop and script using Python.
Nice to have
Experience architecting secure systems using threat modeling and security engineering practices.
Experience conducting secure code reviews across cloud environments, preferably AWS or GCP; Azure experience is a plus.
Experience executing red teaming operations and offensive security strategies.
Security certifications such as OSCP or OSWP.
Knowledge of Laravel and PHP.
Ability to read and understand JavaScript and Go.
Experience with incident response activities.
Experience with web application firewalls and CDN providers such as Cloudflare or Akamai.
Experience with GitLab CI/CD pipelines.
Culture & Benefits
Flat hierarchies, direct communication, pragmatic decisions, and clear responsibility.
Inclusive environment built around acceptance, inclusion, and diverse perspectives.
Team lunches, afterwork drinks, company events, and informal opportunities to connect.
Additional employee perks are available through the company benefits program.
Hiring process
Apply online through the company career page.
Candidate information is handled confidentially according to EEO guidelines.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →