Application Security Engineer (all genders)

dger Diconium Germany GmbH; Berlin; Vor Ort; EUR 55.000 - 75.000; Vollzeit

Benefits dieser Stelle

Training programs

Free language courses

Health offers

Public transport tickets

Job bikes

Pension plan

Zusammenfassung

Diconium in Berlin is seeking an expert in security for agile software development. You will advise teams on identifying and managing security risks, conduct code reviews, and enhance the application security practices.

The ideal candidate should have in-depth knowledge of Java, JavaScript, and TypeScript, along with experience in application security and DevSecOps. You'll enjoy a hybrid work model and various comprehensive benefits.

Qualifikationen

• Solid knowledge of agile software development and experience with Java, JavaScript, and TypeScript.
• Familiarity with modern architectural concepts like microservices and cloud-native solutions.
• Practical experience in application security, especially in DevSecOps.

Aufgaben

• Advise agile software teams on security, including vulnerabilities.
• Identify risks in applications and collaborate on countermeasures.
• Conduct code reviews, threat modeling, and security tests.

Kenntnisse

Agile software development

Java

JavaScript

TypeScript

Application security

DevSecOps

SAST

DAST

Secure coding best practices

NIST

ISO27001

BSI

NIS2

OWASP ZAP

SonarQube

Burp Suite

Professional English

German skills

Jobbeschreibung

What You Can Expect

• Advise agile software development teams in the area of security, including prevention, detection, and remediation of vulnerabilities.
• Identify risks in applications, assess them, and collaborate with teams to find suitable countermeasures.
• Conduct code reviews, threat modeling, and security tests.
• Audit projects and support teams during external audits.
• Contribute to monitoring and continuously improving the security standards of our applications and processes.
• Administer and further develop our security tool stack.

What You Bring Along

• Solid knowledge of agile software development and experience with Java, JavaScript, and TypeScript.
• Familiarity with modern architectural concepts such as microservices, event‑driven systems, web services, and cloud‑native solutions.
• Practical experience in application security, especially in DevSecOps, SAST, DAST, and secure coding best practices.
• Ability to identify security risks and develop appropriate measures.
• Experience with security standards such as NIST, ISO27001, BSI, NIS2 and their application in projects.
• Knowledge of tools like OWASP ZAP, SonarQube, Burp Suite or similar.
• Professional English skills for collaboration in international teams; German skills are a plus.
• A valid working permission for the EU.

What We Have to Offer

• Professional & Personal Growth: Training programs, free language courses, competence centers and an active tech community.
• Flexible Work‑Life Balance: Hybrid work, workation, flexible hours, parental support and sabbaticals.
• Diversity & Sustainability: Engagement in our Sustainability Hub, diverse communities, Diversity Taskforce and after‑work activities.
• Comprehensive Benefits: Public transport tickets, job bikes, health offers, supplementary insurances, a pension plan and various discounts.

What We Value

At Diconium, we value and recognize the unique perspectives and experiences of each individual. We welcome and cherish every single application equally. We stand up against any type of discrimination and harassment based on gender, age, skin colour, religion, sexual orientation, origin, disability, gender identity and other protected characteristics.