Job
In this role, you will take ownership of the security for a critical web application, develop security solutions in C#/.NET, identify and fix vulnerabilities, and collaborate closely with developers and DevOps.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- We are seeking a hands-on Security Engineer to own the security of a large, business-critical web application built on C# / .NET backends.
- This is not only a policy or audit role.
- You will read and write code, find vulnerabilities, fix them, and make sure they stay fixed.
- You will be the go-to person for authentication, authorization, cryptography, and secure API design, working side by side with our developers and DevOps engineers to build security into every stage, from commit to production.
- If you enjoy tracing a token through a request pipeline as much as you enjoy closing a finding, we want to talk to you.
Our expectations of you
Education
- At minimum, a bachelor's degree in Computer Science, IT Security, or a related field.
Qualifications
- Deep practical knowledge of OAuth 2.0, OpenID Connect, JWT (claims, signing algorithms, validation pitfalls), cookies vs. tokens, and authorization models (RBAC, ABAC, policy-based).
- Solid understanding of TLS, hashing (including password hashing algorithms such as bcrypt, scrypt, Argon2, and PBKDF2), symmetric and asymmetric encryption, digital signatures, certificates, and secure key storage.
- Working knowledge of CI/CD pipelines and Docker, sufficient to collaborate effectively with DevOps on secure pipelines and images.
- Comfortable automating tasks with PowerShell, Python or Bash.
- Ownership mentality, pragmatic risk judgment, and the ability to explain security issues clearly to developers and stakeholders without unnecessarily slowing down delivery.
Experience
- Proven, hands-on experience building and maintaining C# / .NET (ASP.NET Core) backends in production.
- Strong command of the OWASP Top 10 and OWASP API Security Top 10, and experience exploiting and fixing issues such as injection, XSS, CSRF, SSRF, IDOR, and broken access control.
- Hands-on experience with SAST/DAST and dependency scanning tools (e.g., SonarQube, Snyk, OWASP ZAP, Burp Suite, GitHub Advanced Security, or similar).
What we offer
- Certifications are not required, but entry-level security and Azure credentials are a strong plus.
Benefits
Health, fitness & fun
Food & drink
Topics you will work on
Job locations
About your employer
As a global technology company, we primarily focus on optical technologies and provide our products and services to the photonics market. Our key target markets include the semiconductor industry, medical technology, automotive and machinery engineering, robotics, as well as traffic safety and security. We are also active in the aerospace, defense, and security sectors.
- 250+ Employees
- Established Company
- Hybrid, Onsite
- Industry, Production
More jobs
These jobs might also interest you
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
sino AG, based in downtown Düsseldorf, has been an innovative financial service provider for over 25 years. We specialize in the execution of securities transactions for the most active and demanding traders in Germany. With currently 26 employees, we...
