Application Security Engineer (m/w/d)
Core
Own the security of a large, business-critical .NET web application by reading/writing code, fixing vulnerabilities, and embedding security into the CI/CD pipeline.
Role type
Senior hands-on Application Security Engineer
Builds
Secure C#/.NET web applications and microservices
Domain
Cloud Security / Application Security
Required skills
C# / .NET (ASP.NET Core), OAuth 2.0, OpenID Connect, JWT, Cryptography (TLS, hashing, encryption), OWASP Top 10, SAST/DAST tools, CI/CD pipelines, Docker, PowerShell/Python/Bash
Preferred skills
Microsoft Azure (Entra ID, Key Vault, Defender), React security, Observability (Application Insights, Sentinel), Terraform/Bicep, GDPR/ISO 27001
Technologies
C#, .NET, ASP.NET Core, OAuth 2.0, OpenID Connect, JWT, Docker, Kubernetes, Azure, SonarQube, Snyk, Burp Suite, GitHub Advanced Security, RabbitMQ, Kafka
Responsibilities
Design and harden authentication/authorization flows; perform code reviews, threat modeling, and hands-on vulnerability testing; embed security in CI/CD pipelines; triage and close security findings; investigate security incidents; write secure-coding guidelines and coach developers.
Seniority
Senior, hands-on IC with technical leadership
