Job
In this role, you actively integrate IT security into software development, further develop the central codebase with Spring Boot, and conduct security analyses and code reviews.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- We are looking for a person who will further develop the cross-sectional codebase across teams, creating added value for the entire development team while actively integrating and implementing IT security into our software development.
- As a Senior Security Software Engineer, you collaborate with our development teams to ensure that security requirements are not only defined but also implemented.
- Additionally, you actively develop the core codebase for our application landscape.
- At the same time, you are a technical sparring partner, implementer, and driver.
- Development of the central codebase for our application landscape based on Spring Boot.
- Creation of libraries and services to support the performance of the entire development team.
- Responsibility for integrating Security-by-Design and Secure Coding Practices into our software landscape in the context of DevSecOps.
- Remediation of security-related or critical vulnerabilities in close collaboration with development teams.
- Support and implementation of cross-cutting aspects of software architecture and application security.
- Further development and optimization of security scanning, SAST, DAST, dependency scanning, secrets management, and CI/CD security.
- Conducting code reviews with a focus on cross-cutting software development and security aspects.
- Advising and supporting teams in technical implementations, threat analyses, and security concepts.
- Ensuring that defined security measures are implemented through coaching, support, and active participation.
Our expectations of you
Qualifications
- Excellent knowledge in Application Security and Secure Software Development.
- Solid knowledge in at least several of the following areas: GitLab / GitLab CI, Secure Coding / OWASP Top 10, DevSecOps, Kubernetes Security, Cloud Security, IAM / Authentication / Authorization, Container Security, API Security, SAST / DAST / Dependency Scanning.
- Ability to implement complex security topics pragmatically and developer-oriented.
- Willingness to take responsibility and drive technical standards across teams.
- A clear "You build it, you secure it, you run it" mentality.
- Very good knowledge of German (at least C1).
Experience
- Several years of experience as a Senior Software Engineer, Security Engineer, DevSecOps Engineer, or comparable.
- Extensive practical experience with Java, Spring Boot, and modern backend architectures.
- Experience with cloud environments, Docker, and Kubernetes.
- Experience with agile methodologies and interdisciplinary teams.
Benefits
Work-Life-Integration
Food & drink
Topics you will work on
Job locations
About your employer
We are a world-renowned logistics company with 29,000 employees in over 40 countries. We specialize in managing complex supply chains and offering our customers innovative value-added services.
- 250+ Employees
- Established Company
- Onsite, Hybrid, Full Remote
- Logistics, Transportation
Employer reviews
- Engineering
- 3.1
- Team culture
- 4.0
- Career growth
- 2.8
- Working conditions
- 4.2
More jobs
These jobs might also interest you
Lead our Stuttgart IT team, both professionally and as line manager, set priorities, and support each team member's development. Ensure the secure, reliable, and efficient operation of our heterogeneous IT infrastructure, including networks, servers,...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
Area of responsibility “DRV Bund IT” is the service provider for Deutsche Rentenversicherung Bund, developing and operating a complex IT system landscape in close coordination with its customers. Our “IT4IT” domain provides IT departments across DRV...