Job
- Level
- Experienced
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Berlin
- Working Model
- Onsite
Job Summary
In this role, you integrate security practices into the entire development process, perform security analyses, and implement security tools in CI/CD pipelines while supporting and advising development teams.
Job Technologies
Your role in the team
- Integration of security throughout the entire development lifecycle (Secure SDLC) - from design and threat modeling to secure implementation, release, and operations.
- Setup and operation of SAST, DAST, SCA, and Secret Scanning tools in CI/CD pipelines
- Conducting code reviews, vulnerability assessments, and threat modeling together with the development teams.
- Assessment, prioritization, and tracking of vulnerabilities (Vulnerability Management) including remediation support.
- Support and coaching of Security Champions in the development teams under central technical leadership.
- Participation in Quality Gates and the definition of safety-related acceptance criteria
- Consultation of the specialist departments on secure architecture and implementation decisions
- Development of standards, guidelines, and activity-oriented specifications for code security
This text has been machine translated. Show original
Our expectations of you
Education
- Completed degree with a focus on Computer Science, Information Security, or IT Security, or vocational training with several years of practical experience in the field of Information and IT Security.
Qualifications
- Solid understanding of common vulnerability classes, e.g., OWASP Top 10, secure development practices, and secure software architectures.
- Knowledge of at least one relevant programming language, e.g., Java, C#, Python, or JavaScript.
- Desirable: Knowledge of BSI IT-Grundschutz, particularly BSI 200-2 and 200-3, relevant standards such as ISO 27001, as well as certifications like OSCP, OSWE, or GWAPT.
- Analytical thinking, prioritization skills, willingness to learn, and openness to new security threats and technologies.
- Moderation and consulting skills, team and communication abilities, as well as the capability to convey security requirements appropriately in German and English at C1 level.
Experience
- Several years of experience in application security or software development with a focus on security.
- Experience with Threat Modeling as well as AppSec tooling, particularly SAST, DAST, and SCA, including integration into CI/CD.
This text has been machine translated. Show original
What we offer
- Great team spirit in a competent and future-proof working environment with unique projects
- A balanced work-life harmony thanks to flexible working models and hours, and 30 days of vacation per year.
- Top equipment, agile development methods with a modern tech stack, and innovative collaboration tools
- Individual training opportunities as well as professional and leadership development programs
- Attractive location with excellent public transportation connections
- Sports collaborations, prevention courses, and running events
- Company pension scheme, asset-building benefits, supportive measures for childcare and caring for relatives
This text has been machine translated. Show original
Benefits
Work-Life-Integration
More net
Topics that you deal with on the job
Job Locations
This is your employer
Bundesdruckerei GmbH
Bundesdruckerei is one of the world's leading high-security technology companies and offers customized solutions for secure identities and data security for citizens, public authorities and companies.
Description
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Internet, IT, Telecommunication
Employer reviews
by devworkplaces.com
Total
(1 Review)3.5
Engineering
3.3Career Growth
3.2Workingconditions
4.2Culture
3.5
Application Security Engineer
- Location
- Berlin
- Working Model
- Onsite
- Diversity
- Open for all genders
