Security Engineer

Imagine actively contributing to the security and reliability of applications, protecting the data of over 1,000,000 office users. In the Web-App Security domain, you'll solve exciting, challenging problems, constantly learn new technologies, and develop valuable skills in an increasingly crucial field.

We're working with a leading German group that provides innovative software solutions for business management, financial services, and educational content, helping over 400,000 small and micro-businesses across Germany succeed.

The Role

• Directly impact and improve application security, making a product used by hundreds of thousands of businesses more secure daily.
• Collaborate closely with feature teams on security issues during conception, implementation, and operation, diving deep into technical matters.
• Develop and maintain cross-team security mechanisms.
• Explore, build, and actively shape new ideas within the Security Enablement Team, with opportunities like Hacking Days and after-work sessions.
• Work in a modern, agile environment utilizing DevOps, Scrum, or Kanban methodologies.

What You'll Need

• Strong knowledge and extensive experience in web application and cloud security (preferably AWS).
• Expertise in securely configuring, building, and releasing modern web applications (IaC, CI/CD, SDLC).
• Ability to assess vulnerabilities in the context of applications and develop recommendations, leveraging knowledge of Java web applications and JavaScript (TypeScript) web clients.
• Understanding of common dependency management tools like NPM and Gradle.
• Development experience and capability to write Bash, Python scripts, or other necessary tools for automation.
• Familiarity with Threat Models and enthusiasm for collaboratively designing them, including the ability to think like an adversary to identify threats.
• Excellent communication skills to convey vulnerabilities and security recommendations clearly and precisely to feature teams.
• Very good German (C2+) and English language skills are essential.

What's On Offer

• Direct impact on the security of widely used applications.
• Opportunities to work with new technologies and develop valuable skills.
• A collaborative and agile work environment with dedicated security experts.
• Flexible working arrangements, including remote options.

Apply via Haystack today!