Application Security Engineer

📋 Description

• Own recurring AppSec activities across multiple product teams.
• Review architecture and code for security risks early.
• Assess vulnerabilities from scanners, tests, bug reports; prioritize meaningful issues.
• Validate fixes and suggest compensating controls when needed.
• Improve AppSec workflows by tuning checks and CI/CD integration.
• Provide engineers with clear prioritization and remediation guidance.

🎯 Requirements

• Hands-on knowledge of web/API security, authentication, secrets handling, secure coding.
• Secure code reviews in Java, TypeScript, and PHP; explain flaws clearly.
• Experience leading threat modeling; translate results into actionable requirements.
• Experience with SAST, SCA, DAST, secrets scanning; CI/CD integration; reduce false positives.
• Knowledge of OAuth/OIDC, service-to-service auth, secrets management, cloud/container security basics.
• Ability to prioritize findings by exploitability, impact, and remediation effort.

🎁 Benefits

• 25 calendar days of paid vacation
• Sick Leave Compensation: 5 paid sick days
• Parental Leave: 18 weeks maternity / 4 weeks paternity
• Medical Insurance (Employees + Dependents)
• School Allowance up to €600/month
• Simcard with unlimited data for active employees