Application Security Engineer (all genders)

Diconium; Berlin; Hybrid; EUR 70,000 - 110,000; Full time

Job summary

Diconium, a leader in digital business transformation, seeks a security-focused specialist in Berlin to guide agile software teams in securing applications and infrastructure. You will help prevent, detect, and remediate vulnerabilities across projects, and contribute to threat modeling and security testing.

With a hybrid work model and international collaboration, you will audit projects, support external audits, improve security standards, and manage our security tool stack.

Qualifications

• Experience in building secure software systems and platforms.
• Practical knowledge of security testing (SAST/DAST) and secure coding practices.
• Familiarity with security standards (NIST, ISO27001, BSI, NIS2).
• Knowledge of tools like OWASP ZAP, SonarQube, Burp Suite or similar.

Responsibilities

• Advise agile software development teams in security, including prevention, detection, and remediation of vulnerabilities.
• Identify risks in applications, assess them, and work with teams on countermeasures.
• Conduct code reviews, threat modeling, and security tests.
• Audit projects and support teams during external audits.
• Contribute to monitoring and improving security standards of applications and processes.
• Administer and develop security tool stack.

Skills

Security engineering

DevSecOps

Threat modeling

Code reviews

English proficiency

Job description

At Diconium, we do digital business transformation across various industries. As a team member, you will work on projects that generate value from software, data, and AI by delivering strategies and solutions that challenge conventional industry practices and drive technological progress. Together with over 2,300 fellow experts, you enable Fortune 500 firms, global market leaders, and SMEs to maximize the impact of their digital initiatives and achieve digital excellence. In everything we do, we prioritize people and genuine human connections, ensuring a supportive and inclusive work environment. And we give you maximum flexibility thanks to our hybrid workplace.

WHAT YOU CAN EXPECT

• You advise agile software development teams in the area of security. This includes the prevention, detection, and remediation of vulnerabilities.
• You identify risks in applications, assess them, and work with the teams to find suitable countermeasures.
• You conduct code reviews, threat modeling, and security tests.
• You audit our projects and support our teams during external audits.
• You actively contribute to monitoring and continuously improving the security standards of our applications and processes.
• You administer and further develop our security tool stack.

WHAT YOU BRING ALONG

• Familiarity with modern architectural concepts such as microservices, event-driven systems, web services, and cloud-native solutions.
• Practical experience in application security, especially in DevSecOps, SAST, DAST, and secure coding best practices.
• Ability to identify security risks and develop appropriate measures.
• Experience with security standards such as NIST, ISO27001, BSI, NIS2 and their application in projects.
• Knowledge of tools like OWASP ZAP, SonarQube, Burp Suite or similar.
• Professional English skills for collaboration in international teams, German skills are a plus.
• A valid working permission for the EU.

WHAT WE HAVE TO OFFER

Discover new skills and improve your strengths, adapt your working day to your personal lifestyle, celebrate community, sustainability and diversity. And sweeten your working life with awesome perks and benefits!

Professional & Personal Growth: Develop yourself both professionally and personally through training programs, free language courses, competence centers and an active tech community.

Flexible Work-Life Balance: Benefit from hybrid work, workation, flexible hours, parental support and sabbaticals.

Embrace Diversity & Sustainability: Engage in our Sustainability Hub, diverse communities, Diversity Taskforce and after-work activities.

Comprehensive Benefits: Enjoy public transport tickets, job bikes, health offers, supplementary insurances, a pension plan and various discounts.

WHAT WE VALUE

At Diconium, we value and recognize the unique perspectives and experiences of each individual. With this in mind, we welcome and cherish every single application equally. At the same time, we stand up against any type of discrimination and harassment based on gender, age, skin color, religion, sexual orientation, origin, disability, gender identity and other protected characteristics.