Application Security Engineer (all genders)

ABOUT YOU SE & Co. KG; Berlin; Vor Ort; EUR 65.000 - 75.000; Vollzeit

Zusammenfassung

ABOUT YOU SE & Co. KG is seeking an Application Security Engineer to protect our online shop, corporate systems and customer data. You will design and implement security measures and work with developers and IT teams to enforce best practices.

You will conduct regular pentests, review code and help secure cloud infrastructure (AWS/Kubernetes). Occasional 24/7 on-call as part of SOC incident response rounds out the role.

Qualifikationen

• Experience in application security and security engineering.
• Proficiency in AWS and Kubernetes hosting architectures.
• Experience with incident response and security automation.
• Ability to read Go source code.
• Experience with web app firewalls and CDN providers like Cloudflare or Akamai.

Aufgaben

• Conduct regular penetration tests and code reviews
• Advise in the setup and maintenance of applications and infrastructure (usually hosted in AWS/Kubernetes)
• Triage and respond to monitoring events
• Optimization and automation of security auditing processes. This could also include setting up attack infrastructure, writing scripts in Python and implementing security scanning in Gitlab CI
• Take part in some incident response activities within the SOC, which include occasional 24/7 on-call

Kenntnisse

Application security

Security engineering

Threat modeling

Penetration testing

Secure code review

Go language

AWS

Kubernetes

WAF/CDN

Incident response

Cloudflare

Akamai

Jobbeschreibung

Application Security Engineer (all genders)

• Full-time
• Compensation: EUR 65000 - EUR 75000 - yearly

We are looking for an Application Security Engineer (all genders) to join the Application Security circle of our IT-Security unit, dedicated to protecting our online shop, our corporate systems and our customers.

In this role, you will hack internal systems, design and implement security measures to safeguard our infrastructure, applications, and data. You will work closely with other security engineers, developers and IT teams to ensure security best practices, automate security processes, and respond to emerging threats.

• Conduct regular penetration tests and code reviews
• Advise in the setup and maintenance of applications and infrastructure (usually hosted in AWS/Kubernetes)
• Triage and respond to monitoring events
• Optimization and automation of security auditing processes. This could also include setting up attack infrastructure, writing scripts in Python and implementing security scanning in Gitlab CI
• Take part in some incident response activities within the SOC, which include occasional 24/7 on-call

• Application security
• Security engineering
• Technical Project Management skills
• Threat modeling
• Penetration testing
• Secure code review
• Cloud experience: AWS, Bonus: GCP, Azure
• Ability to read and understand Go
• Experience with incident response activities
• Experience with web application firewalls, CDN providers, e.g. Cloudflare, Akamai

Your perks at a glance: Visit our benefits page .

A Place Where You Can Be You
We take it as our responsibility to create an environment where everyone feels welcome, exactly as they are.
Different backgrounds and perspectives make us stronger and shape our culture in ways that matter.
What we stand for internally, we stand for as a brand: acceptance, inclusion, and a fairer approach to fashion.