IT Security Engineer - Software (m/w/d)
Core
Design, implement, and secure software applications and complex architectures, integrating security measures into the development lifecycle.
Role type
Application Security Engineer (Software)
Builds
Secure software architectures, application concepts, and security measures for client software solutions.
Domain
IT Security / Software Engineering
Required skills
Secure Software Development Lifecycle (SSDLC), Security Code Reviews, Penetration Testing, SAST/DAST tools, CI/CD integration, API/Web/Microservice security, Authentication/Authorization/Encryption concepts, OWASP standards, Regulatory compliance
Preferred skills
CSIP certification, Advanced security awareness
Technologies
SAST, DAST, CI/CD pipelines, Microservices, APIs, Web applications
Responsibilities
Conceptualize and implement security measures for software applications; Analyze applications for security risks and vulnerabilities; Conduct Security Code Reviews; Integrate security requirements into the SDLC; Develop secure software architectures; Perform penetration tests and application security analyses; Utilize and develop static/dynamic code analysis tools; Integrate security scans into CI/CD pipelines; Identify and remediate security gaps; Secure APIs, web apps, and microservices; Develop auth/encryption concepts; Evaluate security standards and regulations; Create security documentation.
Seniority
Mid-level, hands-on IC
