Senior Application Security Engineer

TL;DR

Senior Application Security Engineer: Developing and scaling application security across the Secure Software Development Lifecycle with an accent on CI/CD security, SAST and security unit tests, and pragmatic threat modeling. Focus on coaching developers and product owners, making security measurable and scalable, and integrating security into daily developer workflows.

Company

hirify.global builds secure products and services for on-premise and cloud environments.

What you will do

• Further develop the Secure Software Development Lifecycle from architecture through CI/CD to operations.
• Embed security into developers’ daily work using IDE plugins, SAST, security unit tests, and golden images.
• Analyze risks using threat modeling and help teams address them pragmatically.
• Coach developers and product owners on security topics as a trusted peer.
• Make security measurable, understandable, and scalable across teams.

Requirements

• Location: Remote-first within Germany, with the option to work remotely from eligible countries for up to 180 days per year.
• At least 5 years of experience in Application Security with a strong focus on secure development.
• Solid proficiency in at least one programming language, plus experience with scripting and automation.
• Strong understanding of modern security standards and frameworks such as OWASP ASVS or NIST.
• Fluency in English (written and spoken); good German skills are an advantage.
• Ability to work independently with high technical expertise and a pragmatic approach.

Culture & Benefits

• Remote-first setup with Germany-based remote work and limited remote work from eligible countries (up to 180 days/year).
• Meal allowance up to €115 net per month.
• Ergonomic workspace allowance for a home office setup.
• Team events and company-wide gatherings, including summer and Christmas parties.
• EGYM Wellpass and JobRad subsidy.
• Capital-forming payments (Vermögenswirksame Leistungen) and a company pension scheme.

Hiring process

• Submit your CV, salary expectations, and earliest start date.
• Interviews and evaluation of technical fit and communication skills.