Application Security Engineer (all genders)

ABOUT YOU; Hamburg; On-site; EUR 65,000 - 90,000; Full time

Job summary

ABOUT YOU is seeking an Application Security Engineer to join the IT-Security circle, protecting our online shop and corporate systems. You will perform penetration testing and code reviews, advise on secure setups in AWS/Kubernetes, and respond to monitoring events.

The role emphasizes automation of security audits and incident response within the SOC, with on-call rotations. Candidates should have 2+ years in application security and strong Python skills.

Qualifications

• 1+ year in a junior-level position and at least 2+ years in application security
• Strong background in threat modeling, penetration testing, and manual secure code reviews
• Fluency in Python for security automation and tooling
• Solid hands-on experience securing modern cloud environments (AWS or GCP)
• Ability to manage complex technical security projects across multi-functional engineering teams

Responsibilities

• Conduct regular penetration tests and code reviews
• Advise in setup and maintenance of applications and infrastructure (AWS/Kubernetes)
• Triage and respond to monitoring events
• Automate security auditing processes and write scripts in Python
• Participate in incident response activities within the SOC, including on-call duties

Skills

Threat modeling

Penetration testing

Secure code reviews

Python

Cloud environments

Security project management

Automation

Tools

Gitlab CI/CD Pipelines

Cloudflare

Akamai

Kubernetes

Job description

Company Description

ABOUT YOU

is one of Europe's fastest growing e-commerce companies. Based in Hamburg and Berlin, we operate at the intersection of fashion and technology. Our mission is to rethink online shopping and make it personal and seamless. This takes more than good ideas. It takes people who take initiative and challenge the status quo. We believe in flat hierarchies, direct communication, and pragmatic decisions. No long approval chains. Just ownership, trust, and clear responsibility. We work hard, but we also believe in enjoying the ride together - over team lunches, afterwork drinks, company events, or a quick coffee in between meetings. If this sounds like you, ABOUT YOU could be the right place to bring in your perspective.

Job Description

We are looking for an Application Security Engineer (all genders) to join the Application Security circle of our IT-Security unit, dedicated to protecting our online shop, our corporate systems and our customers.

• Conduct regular penetration tests and code reviews
• Advise in the setup and maintenance of applications and infrastructure (usually hosted in AWS/Kubernetes)
• Triage and respond to monitoring events
• Optimization and automation of security auditing processes. This could also include setting up attack infrastructure, writing scripts in Python and implementing security scanning in Gitlab CI
• Take part in some incident response activities within the SOC, which include occasional 24/7 on-call

Qualifications

• At least 1+ year in a Junior-level position and overall min. 2+ years of experience in application security
• Strong background in threat modeling, penetration testing, and manual secure code reviews
• Fluency in Python for security automation, tooling, and code assessment
• Solid hands-on experience securing modern cloud environments (AWS or GCP)
• Demonstrated ability to manage complex technical security projects, align dependencies, and track deliverables across multi-functional engineering teams

Nice to have

• Certificates: e.g. OSCP, OSWP, etc.
• Knowledge of Laravel / PHP.
• Ability to read and understand JavaScript
• Ability to read and understand Go
• Experience with incident response activities
• Experience with web application firewalls, CDN providers, e.g. Cloudflare, Akamai
• Experience with Gitlab CI/CD Pipelines

Additional Information

Your perks at a glance: Visit our benefits page.

A Place Where You Can Be You

We take it as our responsibility to create an environment where everyone feels welcome, exactly as they are.

Different backgrounds and perspectives make us stronger and shape our culture in ways that matter.

What we stand for internally, we stand for as a brand: acceptance, inclusion, and a fairer approach to fashion.