Application Security Engineer
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Application Security Engineer: Protecting the online shop and corporate infrastructure through proactive security measures and threat mitigation with an accent on penetration testing, code reviews, and security automation. Focus on designing secure cloud architectures in AWS/Kubernetes, triaging security events, and participating in incident response activities.
Location: Must be based in or able to work from Hamburg or Berlin, Germany
Salary: €65,000–€75,000 yearly
Company
is a leading fashion e-commerce company focused on acceptance, inclusion, and a fairer approach to the fashion industry.
What you will do
- Conduct regular penetration tests and secure code reviews to identify vulnerabilities.
- Advise on the setup and maintenance of secure infrastructure and applications in AWS/Kubernetes.
- Automate security auditing processes and implement scanning within Gitlab CI/CD pipelines.
- Triage and respond to monitoring events and participate in incident response activities.
- Develop security scripts using Python and maintain attack infrastructure.
Requirements
- Proven experience in application security and security engineering.
- Strong proficiency in Python programming.
- Hands-on experience with cloud environments, specifically AWS.
- Knowledge of threat modeling and penetration testing methodologies.
- Technical project management skills to coordinate security initiatives.
- Must be located in or willing to work from Hamburg or Berlin, Germany.
Nice to have
- Offensive Security certifications (e.g., OSCP, OSWP).
- Experience with PHP, JavaScript, or Go.
- Familiarity with WAFs and CDN providers like Cloudflare or Akamai.
- Experience with incident response and SOC operations.
Culture & Benefits
- Inclusive and diverse work environment that values individual perspectives.
- Commitment to a fair and accepting corporate culture.
- Access to comprehensive company benefits and professional development opportunities.
- Hybrid work model supporting flexibility in a professional setting.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →