IT Application Security Engineer (m/f/d) at Michael Page

berlin, Berlin, Germany -

Full Time

Start Date

Immediate

Expiry Date

28 Dec, 26

Salary

85000.0

Posted On

29 Sep, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Industry

Information Technology & Services

Description

Would you like to become a part of this and play a key role in shaping the company's future? Then apply now as an IT Application Security Engineer (m/f/d)!

area of responsibility

Central role in the further development and security of modern applications and platforms
Close collaboration with development, platform and security teams in an innovative environment
Promoting a security-oriented corporate culture and actively contributing to the security strategy
Opportunity to exert a lasting influence on products, processes and safety standards
Responsibility for application security throughout the entire Software Development Lifecycle (SDLC)
Conducting threat modeling, architecture reviews, and security assessments for applications, APIs, and distributed systems.
Identification, assessment and prioritization of security vulnerabilities, as well as support for their remediation.
Integration, operation and continuous optimization of security tools within CI/CD pipelines (e.g. SAST, DAST, SCA, dependency and secret scanning)
Definition and promotion of secure development standards and best practices for software development
Consulting on authentication, authorization, identity and secrets management, and secure service communication concepts.
Support for penetration tests, conducting targeted security tests, and following up on measures.
Contributing to security guidelines, standards and awareness campaigns in the field of IT security
Close collaboration with developers, architects, and platform teams to embed security and DevSecOps in all development processes.

Requirements profile

Several years of professional experience in the field of product security, application security, software security or a comparable field
Sound knowledge of secure software development processes and common application security risks
Practical experience in threat modeling, architecture and code reviews, and security analysis of applications.
Safe handling of security tools such as SAST, DAST, SCA, dependency and secret scanning solutions
Comprehensive expertise in application, API and distributed system security
Experience in securing authentication, authorization, and identity management processes
Good knowledge of OWASP, CWE, modern security testing methods and security engineering standards
Experience with CI/CD pipelines and the implementation of DevSecOps principles
Strong ability to collaborate with development, platform, and DevOps teams.
Fluent English skills; German skills are an advantage.
Ideally, experience in software development with C#, .NET, JavaScript/TypeScript, Python or similar technologies.
Knowledge of securing cloud-native applications and services in Azure and/or AWS environments
Relevant certifications in the field of IT security, e.g., OSCP, CSSLP, OSWE or GIAC Secure Development
Experience in agile software development projects and methods

How To Apply:

Incase you would like to apply to this job directly from the source, please click here

Responsibilities

Would you like to become a part of this and play a key role in shaping the company's future? Then apply now as an IT Application Security Engineer (m/f/d)!

area of responsibility

Central role in the further development and security of modern applications and platforms
Close collaboration with development, platform and security teams in an innovative environment
Promoting a security-oriented corporate culture and actively contributing to the security strategy
Opportunity to exert a lasting influence on products, processes and safety standards
Responsibility for application security throughout the entire Software Development Lifecycle (SDLC)
Conducting threat modeling, architecture reviews, and security assessments for applications, APIs, and distributed systems.
Identification, assessment and prioritization of security vulnerabilities, as well as support for their remediation.
Integration, operation and continuous optimization of security tools within CI/CD pipelines (e.g. SAST, DAST, SCA, dependency and secret scanning)
Definition and promotion of secure development standards and best practices for software development
Consulting on authentication, authorization, identity and secrets management, and secure service communication concepts.
Support for penetration tests, conducting targeted security tests, and following up on measures.
Contributing to security guidelines, standards and awareness campaigns in the field of IT security
Close collaboration with developers, architects, and platform teams to embed security and DevSecOps in all development processes.

Requirements profile

Several years of professional experience in the field of product security, application security, software security or a comparable field
Sound knowledge of secure software development processes and common application security risks
Practical experience in threat modeling, architecture and code reviews, and security analysis of applications.
Safe handling of security tools such as SAST, DAST, SCA, dependency and secret scanning solutions
Comprehensive expertise in application, API and distributed system security
Experience in securing authentication, authorization, and identity management processes
Good knowledge of OWASP, CWE, modern security testing methods and security engineering standards
Experience with CI/CD pipelines and the implementation of DevSecOps principles
Strong ability to collaborate with development, platform, and DevOps teams.
Fluent English skills; German skills are an advantage.
Ideally, experience in software development with C#, .NET, JavaScript/TypeScript, Python or similar technologies.
Knowledge of securing cloud-native applications and services in Azure and/or AWS environments
Relevant certifications in the field of IT security, e.g., OSCP, CSSLP, OSWE or GIAC Secure Development
Experience in agile software development projects and methods

area of ​​responsibility

Requirements profile

area of ​​responsibility

Requirements profile

area of responsibility

area of responsibility