Werkstudent Schwachstellenmanagement

About the role

Langlauf Security Automation GmbH is looking for a student to work on vulnerability management, specifically focusing on mapping software components to vulnerabilities using SBOMs. The role involves improving identification processes using Python and developing effective reporting concepts for different target audiences. The position offers the opportunity to work with AI agents and aims for a potential full-time transition after graduation.

Responsibilities

• Map components reliably to their vulnerabilities using PURL or CPE identifiers.
• Improve the identification process for vulnerabilities using Python, Dependency-Track, NVD, and OSV databases.
• Develop concepts for vulnerability reports tailored to specific target audiences.
• Work independently and communicate complex technical issues clearly.

Required skills

• Python
• Software security
• Vulnerability management
• German

Nice to have

• SBOM
• CVE
• Dependency-Track

Qualifications

• Currently enrolled in Computer Science or a related field

Benefits

• Remote work
• Flexible working hours
• Above-average pay
• Potential for full-time employment after graduation

About the Company

Langlauf Security Automation GmbH, based in Lippstadt, specializes in identifying open-source and third-party components in compiled software without requiring source code. They generate Software Bills of Materials (SBOMs) and cross-reference them with vulnerability databases to provide comprehensive security reports.