Application Security Engineer

About the role

As an Application Security Engineer, you will play a key role in strengthening the security of products and platforms. You will work closely with engineering and security teams to build secure software and drive a security-first culture across the organization. This role involves influencing security strategy and embedding security practices throughout the software development lifecycle.

Responsibilities

• Drive product security across the entire software development lifecycle (SDLC).
• Perform threat modeling, architecture reviews, and security assessments for applications, APIs, and distributed systems.
• Identify, assess, prioritize, and support the remediation of security vulnerabilities.
• Integrate, operate, and continuously improve security tooling within CI/CD pipelines, including SAST, DAST, SCA, dependency scanning, and secrets-scanning solutions.
• Define, promote, and support secure coding standards and security best practices across engineering teams.
• Review and advise on authentication, authorization, identity management, secrets management, and service-to-service communication designs.
• Support penetration testing activities, conduct targeted security testing, and drive remediation efforts.
• Contribute to security policies, standards, and security awareness initiatives.

Required skills

• Product Security
• Application Security
• Threat modeling
• Architecture reviews
• Code reviews
• SAST
• DAST
• SCA
• API security
• OWASP
• CWE
• CI/CD
• DevSecOps

Nice to have

• C#
• .NET
• JavaScript
• TypeScript
• Python
• Azure
• AWS
• Agile

Qualifications

• 5+ years of experience in Product Security, Application Security, Software Security, Secure Software Development, or a related field

Certifications

• OSCP
• CSSLP
• OSWE
• GIAC Secure Development

Benefits

• 30 days vacation
• Company pension scheme
• Pluxee vouchers
• HVV-Abo or underground parking subsidy
• JobRad leasing
• EGYM Wellpass