Security Engineer (m/w/d)
Core
Identifying security vulnerabilities in complex open-source software, analyzing attack surfaces, and securing Linux-based software solutions through automated security testing.
Role type
Senior IC security engineer (application security & penetration testing)
Builds
Secure Linux-based software products and automated security testing pipelines
Domain
Cybersecurity, Open Source, Linux Systems
Required skills
Penetration testing (White-Box/Grey-Box), Vulnerability analysis (CVEs), Security automation, Linux system administration, Web application security (OWASP Top 10, AuthN/Z), SAST/DAST/Fuzzing, Infrastructure as Code (Terraform/OpenTofu)
Preferred skills
Open-source security tools (ZAP, Semgrep, Trivy, Grype), Ruby on Rails, React, Foreman, Katello, Open-source contributions
Technologies
GitLab CI/CD, Ansible, OpenTofu, Terraform, ZAP, Semgrep, Trivy, Grype, Linux
Responsibilities
Plan and execute White-Box and Grey-Box penetration tests; Identify, analyze, and assess security vulnerabilities and attack scenarios; Evaluate CVEs for relevance and exploitability; Document vulnerabilities and derive remediation recommendations; Develop and automate security and regression tests; Build and maintain reproducible test environments; Collaborate with software development teams to fix security issues
Seniority
Senior, hands-on IC
