Junior Application Security Engineer (all genders)

Description

The company runs an online fashion shop, and its IT-Security unit protects the shop, internal corporate systems and customer data. You would join the Application Security group, which works closely with developers and IT teams.

The company is one of Europe's fastest-growing e-commerce businesses, with offices in Hamburg and Berlin, and works at the point where fashion meets technology.

The team uses flat hierarchies, direct communication and quick decisions without long approval chains.

Responsibilities

• Run regular penetration tests and review code for security issues.
• Help set up and maintain applications and infrastructure, which usually runs on AWS and Kubernetes.
• Triage monitoring alerts and respond to them.
• Automate and improve security audits, which may include building attack infrastructure, writing Python scripts and adding security scans to GitLab CI.
• Take part in incident response work in the SOC, including occasional 24/7 on-call shifts.

Requirements

• At least one year of hands-on application security experience.
• Able to carry out active application security assessments and penetration tests.
• Python scripting: required.
• PHP, JavaScript or Go: preferred.
• Able to design secure systems using threat modeling and security engineering methods.
• Able to perform secure code reviews in cloud environments: AWS or GCP preferred, Azure a plus.
• Experience running red team operations and offensive security strategies.
• Certificates such as OSCP or OSWP.
• Knowledge of Laravel and PHP.
• Able to read and understand JavaScript.
• Able to read and understand Go.
• Experience with incident response.
• Experience with web application firewalls and CDN providers such as Cloudflare or Akamai.
• Experience with GitLab CI/CD pipelines.

Conditions

Occasional 24/7 on-call duty is part of the role.

Applications are submitted through the company's online career page.

Candidate information is handled confidentially in line with EEO guidelines.

Benefits

• Perks are listed on the company's benefits page.