Application Security Engineer (m/w/d)
Core
Integrating security into the entire software development lifecycle (SDLC) from design and threat modeling to implementation, release, and operations.
Role type
Application Security Engineer
Builds
Secure software products and CI/CD pipelines with integrated security scanning
Domain
Information Technology / Application Security
Required skills
Secure SDLC practices, Threat Modeling, SAST/DAST/SCA tooling, Vulnerability Management, Code Review, Secure Architecture Design, Programming (Java/C#/Python/JavaScript)
Preferred skills
BSI IT-Grundschutz knowledge, ISO 27001 standards, OSCP/OSWE/GWAPT certifications
Technologies
SAST, DAST, SCA, CI/CD pipelines, OWASP Top 10
Responsibilities
Integrate security into the SDLC, Operate security scanning tools in CI/CD, Conduct code reviews and threat modeling, Manage vulnerability lifecycle, Coach security champions, Define security acceptance criteria, Advise on secure architecture
Seniority
Mid-Senior, hands-on IC
