Position: Senior Application Security Engineer
Company: ABOUT YOU
Category: Security
Experience required: 3y
English level: upper

Our security team ensures that visitors of our online shop have a safe shopping experience and their personal data is secure with us. In addition, the team also protects our corporate data and the equipment of our employees.

Our goal is to create a secure environment without restricting or slowing down business processes.

Challenges for the coming months are e.g. the following areas:
– Keep the security level on a high level during the rapid company growth;
– Hyper-automation of tasks;
– Promoting security best practices among developers.

From now on we are looking for an Application Security Engineer who is passionate to work on these topics, but also wants to take hands-on responsibility.


**What you will do**

- Conduct regular security audits and code reviews with developers collectively;
- Development of creative solutions and testing of new own tools; 
- Optimization and automation of security auditing processes. This could also include setting up attack infrastructure, writing scripts in Python / Bash; 
- Once in several weeks you will be responsible for L1 SOC response, i.e. look into alerts and triage them internally. 

**Who you are**

- At least 4 years of hands-on experience in the IT Security field;
- Experience in Pentesting, Ethical Hacking, Bug Bounties, Black/White/Grey-Box testing; 
- Very good knowledge of a programming language (like Python); 
- Completed training as an IT specialist or a university degree in computer science is advantageous; 
- Knowledge of AWS is an advantage; 
- Fluent English: spoken and written; 

**Nice to have:**

- Ability to read and understand PHP, JavaScript. 


**Additional Salary Information**

We have defined salary ranges for all levels for this function – feel free to reach out if you have questions.

Senior: 75.000 € – 85.000 €