Diconium Germany GmbH
Application Security Engineer (m/w/x)
Vollzeitmit HomeofficeBerufserfahren
Berlin
Neuer Job?Nejo!
Dein persönlicher KI-Karriere-Agent
Nejo KI-Zusammenfassung
Securing web, mobile, and backend applications for a global delivery platform. "Secure by Design" approach and threat modeling required. Hybrid work, 27 days holiday, €1000 educational budget.
Deine Match-Analyse
von deinem Karriere-Agenten
Warum dieser Job zu dir passt
Mögliche Lücken
Tipps für deine Bewerbung
Anforderungen
- Solid foundational knowledge of web/mobile application security principles
- Knowledge of common vulnerability types (OWASP Top 10)
- Basic web/API security architectures knowledge
- Ability to read/understand code in Java, Python, Go, or TypeScript
- Ability to identify and fix security flaws
- Experience reproducing application vulnerabilities
- Experience using Burp Suite or OWASP ZAP
- Basic understanding of CI/CD systems (GitHub Actions, GitLab CI)
- Basic understanding of automated security scanner integration
- Exposure to basic cloud computing principles (AWS, GCP, Azure)
- Exposure to basic container concepts (Docker, Kubernetes)
- Eagerness to learn AI-driven tools for security
- Eagerness to utilize AI tools for automation
- Strong collaborative skills
- Empathetic approach to partnering with engineers
- Experience participating in Bug Bounty programs
- Experience participating in CTF competitions
- Familiarity with OAuth 2.0, OIDC, or SAML
- Industry certifications (Security+, eJPT, GWAPT)
Aufgaben
- Work with senior engineers and product development teams
- Ensure web, mobile, and backend applications are built securely
- Champion a "Secure by Design" approach
- Shift security left into early development stages
- Assist with application threat models
- Triage vulnerability reports
- Configure CI/CD security tooling
- Help developers write secure code
- Conduct security assessments
- Review code for vulnerabilities
- Assist product teams in remediating application-layer vulnerabilities
- Manage Bug Bounty and Vulnerability Disclosure Programs
- Triage, validate, and reproduce reported flaws
- Route flaws to engineering teams
- Implement and maintain automated security testing tools
- Integrate SAST, DAST, and SCA into CI/CD pipelines
- Facilitate threat modeling sessions
- Conduct architectural reviews for new features and microservices
- Support team initiatives in security automation and AI tools
- Optimize vulnerability triage with automation
- Optimize code analysis with automation
- Optimize daily security workflows with automation
- Track remediation progress against metrics
- Track Mean Time to Remediate (MTTR)
- Track SLA Adherence %
- Work with developers to ensure timely fixes
- Provide guidance on secure coding standards
- Provide guidance on secure best practices
- Provide guidance on secure library usage
Ausbildung
Abgeschlossene BerufsausbildungODER
Bachelor-AbschlussODER
Master-Abschluss
Sprachen
Englisch – verhandlungssicher
Tools & Technologien
JavaPythonGoTypeScriptBurp SuiteOWASP ZAPGitHub ActionsGitLab CIAWSGCPAzureDockerKubernetesOAuth 2.0OIDCSAMLSecurity+
Benefits
Flexibles Arbeiten
- Hybrid working model
Mehr Urlaubstage
- 27 days holiday
- Extra holiday day on 2nd and 3rd year of service
Sonstige Zulagen
- 1000 € Educational Budget
- Digital Meal Vouchers
- Food Vouchers
Weiterbildungsangebote
- Language courses
- Udemy Business platform access
Familienfreundlichkeit
- Parental support
Gesundheits- & Fitnessangebote
- Health checkups
- Gym membership
Mentale Gesundheitsförderung
- Meditation
Attraktive Vergütung
- Employee Share Purchase Plan
Workation & Sabbatical
- Sabbatical Bank
Öffi Tickets
- Public Transportation Ticket Discount
Sonstige Vorteile
- Life & Accident Insurance
- Relocation support
Betriebliche Altersvorsorge
- Corporate Pension Plan
Von Nejo automatisch aufbereitet
Nejo hat diesen Job automatisch von der Website des Unternehmens Delivery Hero erfasst und die Informationen auf Nejo mit Hilfe von KI für dich aufbereitet. Trotz sorgfältiger Analyse können einzelne Informationen unvollständig oder ungenau sein. Bitte prüfe immer alle Angaben in der Originalanzeige! Inhalte und Urheberrechte der Originalanzeige liegen beim ausschreibenden Unternehmen.
Zur Originalanzeige bei Delivery HeroÜber das Unternehmen
DE
ITBerlin
The company is a pioneering local delivery platform operating in over 70 countries, focused on delivering an amazing experience.
Wie gut ist dein Lebenslauf?
Nejo bewertet ihn, und bringt ihn danach gemeinsam mit dir in Bestform.
Du hast noch keinen Lebenslauf?
Noch nicht perfekt?
- SolarisCyber Security Staff Engineer - Application Security (m/w/x)Vollzeitmit HomeofficeSeniorBerlinab 85.000 - 110.000 / Jahr
- KAYAKSecurity Engineer (m/w/x)Vollzeitmit HomeofficeBerufserfahrenBerlin
- AwinApplication Security Engineer (m/w/x)Vollzeitmit HomeofficeSeniorBerlin
- KNIMEApplication Security Engineer (m/w/x)Vollzeitmit HomeofficeSeniorBerlin, Konstanz