Application Security Engineer

Enam, Inc.; Berlin; Hybrid; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

Enam, Inc. in Berlin, Germany, is seeking a security-focused software engineer to lead threat modeling, design secure architectures, and implement authentication, authorization, and data protection across services.

You will build security libraries, integrate SAST/DAST/SCA into CI/CD, conduct secure code reviews, and harden cloud infra. The role demands 5+ years in security-minded engineering and a strong collaborative mindset.

Qualifikationen

• BSc. or MSc. in Computer Science or comparable degree.
• At least 5 years of experience in software engineering and infrastructure with a focus on security.
• Exceptional problem-solving abilities, effective communication, and teamwork skills.
• Strong backend and application security engineering experience, including secure backend services, APIs, authentication, access control, and data protection.
• Hands-on experience with threat modeling, secure design reviews, OWASP Top 10, common vulnerability classes, and secure coding practices.
• Experience with security testing tools such as Semgrep, CodeQL, Snyk, Burp Suite, or similar.
• Experience implementing and automating security controls in cloud environments, AWS preferred.
• Familiarity with IAM, network security, encryption, secure SDLC practices, container security, secrets management, and CI/CD hardening.

Aufgaben

• Lead threat modeling and secure design reviews for new features, services, and architectural changes to discover and mitigate security findings early.
• Design and implement security-sensitive application functionality such as authentication, authorization, roles and permissions, and customer data handling.
• Build and maintain security libraries, tooling, and AI-powered agent suites that enable engineering teams to ship secure code by default and run frequent in-house security tests.
• Own our security testing lifecycle: integrate SAST, DAST, and SCA into CI/CD, contract and operate external penetration tests, and lead remediation of findings end-to-end.
• Perform secure code reviews and partner with developers on fixes, not just filing tickets, but pairing on solutions.
• Harden cloud infrastructure and runtime environments, including container security, network policies, secrets management, and least-privilege access controls.
• Evaluate security risks of portfolio companies.

Kenntnisse

Security engineering

Threat modeling

Backend security

Communication

Teamwork

Problem solving

Ausbildung

BSc. or MSc. in Computer Science or comparable degree

Tools

Semgrep

CodeQL

Snyk

Burp Suite

Jobbeschreibung

Join us at the frontier of AI, acquisitions, and transformation. Our mission is to accelerate the future of work. Our work is inspired by Ford's assembly line and Ohno's production system.

We are a well-funded company pioneering a new model of acquisition-led growth. Instead of building software companies the traditional way, chasing customers with sales and marketing, we acquire services businesses and reinvent them from the inside out.

Our founding team boasts a remarkable track record in AI and company-building, with each member having previously steered AI startups to unicorn status (e.g. Cresta.ai).

Our approach is not SaaS: We drive growth through acquisition and technology is our transformation engine. Each company we bring on board comes with complex workflows, legacy systems, and antiquated data structures. We turn that complexity into opportunity, designing platforms that unlock efficiency, scale, and profitability.

What you will do

• Lead threat modeling and secure design reviews for new features, services, and architectural changes to discover and mitigate security findings early.
• Design and implement security-sensitive application functionality such as authentication, authorization, roles and permissions, and customer data handling.
• Build and maintain security libraries, tooling, and AI-powered agent suites that enable engineering teams to ship secure code by default and run frequent in-house security tests.
• Own our security testing lifecycle: integrate SAST, DAST, and SCA into CI/CD, contract and operate external penetration tests, and lead remediation of findings end-to-end.
• Perform secure code reviews and partner with developers on fixes, not just filing tickets, but pairing on solutions.
• Harden cloud infrastructure and runtime environments, including container security, network policies, secrets management, and least-privilege access controls.
• Evaluate security risks of portfolio companies.

What we look for

• BSc. or MSc. in Computer Science or comparable degree.
• At least 5 years of experience in software engineering and infrastructure with a focus on security.
• Exceptional problem-solving abilities, effective communication, and teamwork skills.
• Strong backend and application security engineering experience, including secure backend services, APIs, authentication, access control, and data protection.
• Hands-on experience with threat modeling, secure design reviews, OWASP Top 10, common vulnerability classes, and secure coding practices.
• Experience with security testing tools such as Semgrep, CodeQL, Snyk, Burp Suite, or similar.
• Experience implementing and automating security controls in cloud environments, AWS preferred.
• Familiarity with IAM, network security, encryption, secure SDLC practices, container security, secrets management, and CI/CD hardening.

Apply

Start your application

Choose the application path for your location.