Application Security Engineer (Berlin/hybrid)

Eterno Health GmbH; Berlin; Vor Ort; EUR 60.000 - 90.000; Vollzeit

Benefits dieser Stelle

Competitive salary

Company pension with 20% top-up

Health check-ups

Public transport vouchers

Language courses

Zusammenfassung

Eterno Health GmbH in Berlin is seeking an Application Security professional to lead security efforts in developing ETERNO Cloud, a SaaS platform for medical practices. You will collaborate with engineering teams to integrate application security into workflows and manage risks associated with sensitive healthcare data.

Join a hybrid work model, enjoy competitive salary and benefits, and contribute to meaningful healthcare solutions. The role offers opportunities for personal and professional growth, while promoting a diverse and inclusive environment.

Qualifikationen

• Proven experience in application security and secure development.
• Strong knowledge of security frameworks like ISO 27001 and GDPR.
• Ability to collaborate closely with engineering teams.

Aufgaben

• Oversee secure development workflows across engineering.
• Conduct threat modeling and security reviews.
• Manage vulnerability awareness and remediation processes.

Kenntnisse

Application Security

Secure SDLC

AWS

SAST

DAST

Vulnerability Management

Threat Modeling

ISO 27001

GDPR

Jobbeschreibung

Your mission

Application Security | Secure SDLC | AWS | SAST/DAST | Threat Modeling | Vulnerability Management | ISO 27001 | GDPR

We build ETERNO Cloud, the operating system for modern medical practices. It brings the core workflows of a medical practice into one cloud SaaS platform. The product handles sensitive healthcare data in a regulated, GDPR-compliant, and ISO 27001-certified environment, so security needs to be part of how we build, ship, and operate software.

You are the main AppSec owner inside engineering, working closely with ISMS, Cloud Platform, and Tech Leads to make application security actionable in product development.

What you shape and run

• Secure development workflows across product engineering, from PR checks to CI/CD security gates
• SAST, DAST, dependency scanning, and IaC scanning that help teams find issues early
• Threat modeling, auth/authz reviews, secure API design, and permission model reviews for new and existing features
• Multi-tenant SaaS isolation, permission models, and healthcare data handling across product workflows
• Vulnerability management from finding and prioritization to remediation and closure
• Pentests with external partners, including scope, coordination, findings, remediation, and follow-up
• Technical security controls and evidence for ISO 27001, GDPR, risk management, and the ISMS
• Security monitoring and cloud security findings in close collaboration with Cloud Platform and Tech Leads
• Security guidance that helps teams ship safely without turning security into unnecessary process

What you care about

• Security that is built into engineering workflows, not added at the end
• Clear ownership for vulnerabilities, risks, findings, and follow-up work
• Practical standards that help teams make good security decisions independently
• Protecting sensitive healthcare data through strong product, platform, and access controls
• Working closely with ISMS, Cloud Platform, Tech Leads, and product engineering
• Reducing risk without creating unnecessary friction for teams

What to expect at ETERNO

• Make a real impact – Help us transform healthcare with bold, hands‑on solutions for real challenges. Your contribution counts from day one – with responsibility, speed, and room for your own ideas.
• Your workspace – Take advantage of our hybrid model: You’ll spend 3 days a week at our office in Berlin to collaborate with your team, and the rest of the time you’ll work flexibly from home.
• Level up & grow – Join an ambitious team that challenges and supports you. Whether leadership or deep dive: develop both professionally and personally through regular feedback, open exchange, and language courses in German & English.
• Feel good, stay healthy – Access the ETERNO Spaces for quick doctor visits & health check‑ups. For more movement in your day: lease a JobRad – tax‑advantaged and eco‑friendly.
• We’ve got you covered – Competitive salary, company pension with a 20% top‑up, and a monthly budget for benefits like Urban Sports Club, vouchers, or public transport – plus attractive corporate benefits & our Refer‑a‑Friend bonus.
• Stay connected – Meet driven, inspiring people. Whether Monthly All‑Hands, team offsites, or spontaneous office vibes – we celebrate success together and push each other as a team.

What we want to highlight

At ETERNO, we promote equal opportunities and diversity. We are committed to creating a diverse and inclusive environment for every one of us. We reject any form of discrimination based on ethnicity, skin color, physical or mental disability, religion, marital status, age, national origin, ancestry, health status, pregnancy, gender, sexual orientation, gender identity, or any other personal characteristics.

If you require any accommodations during the application process, please contact us in advance at [e-mail]. We are happy to support you.

#LI-Hybrid