Job
- Level
- Experienced
- Location
- Cologne
- Working Model
- Hybrid, Onsite
- Job Field
- IT, DevOps, Security
- Employment Type
- Part Time/Full Time
- Contract Type
- Permanent employment
Job Summary
In this role, you will develop Security Champion programs, train teams on security culture, and integrate security tools into the SDLC, while working with modern technologies like GCP, Kubernetes, and Terraform.
Job Technologies
Your role in the team
- Development and continuous improvement of a Security Champion Program and alignment of community events such as Capture the Flag.
- Improvement of security culture through training and coaching of software engineers, leaders, and product owners with practical tasks in offensive security as well as security by design and secure coding.
- Creating guidelines that describe concrete, practical activities and tools in the SDLC for software developers, thereby making the requirements from the Information Security Management System manageable.
- Development and enhancement of DevSecOps security and compliance tools that integrate security into the SDLC according to Shift Left. Supporting platform teams in integrating the tools into their platforms.
- Independent, agile working within and with self-organized teams.
- Working with a tech stack that includes microservices in GCP, Terraform, Kubernetes, Kafka, Elasticsearch, PostgreSQL, Java monoliths on VMs, SAP, and mainframe.
This text has been machine translated. Show original
Our expectations of you
Education
- Completed degree in Computer Science with a clear focus on IT Security or a comparable completed qualification. Alternatively, we also welcome applications from individuals without the relevant qualification but with many years of experience.
Qualifications
- Expertise in Web Application Security Testing, Cloud and Network Security Assessment.
- Knowledge in Web Application Security, e.g., vulnerabilities and solutions for the OWASP Top 10.
- You were a Security Champion or Security Engineer in an Agile product team.
- You have mastered Prometheus, Grafana, Terraform, Kubernetes, Google Cloud Platform (GCP).
- DevOps mindset and interest in outcome-oriented, experimental, data-driven product development, as well as automation, CI/CD, DevOps, SDLC, DevSecOps, and microservice architectures.
Experience
- Experience in creating guidelines and architecture specifications that meet the requirements of an ISMS according to ISO27001.
- Initial practical experience in building security communities and security champion programs.
This text has been machine translated. Show original
What we offer
- Your life-work integration through flexible working hours, remote work, 30 days of vacation + regional traditional days, time-off models (sabbatical, caregiver leave, etc.), and company kindergarten.
- More time for yourself - take advantage of the opportunity to have up to two additional weeks of free time per year; individually plannable and flexibly redeemable in consultation with your team.
- We invest in your future. With your annual training budget, you can learn to develop your individual skills.
- Updates for you on in-house workshops and events, such as the hackathon and tech talks, as well as weekly stand-ups, regular tech all-hands, and open door formats.
- Your impact, because you develop applications and services for millions of people - with over 1 billion data records daily, on more than 6 million phones, 32,000 cash registers, or in 7,300 markets.
- Your relaxed commute with the discounted Germany ticket, a company bike, and parking spaces right outside the door.
- Our networks such as DITO - different together, SHINE, f.ernetzt, WomEngineers @REWE digital, and Women's Drive make us a vibrant community and support you in your personal development.
- Advantages of a corporation for you, e.g., in the form of discounts at REWE, PENNY, toom Baumarkt, and the DERTOUR Group, comprehensive healthcare benefits, support for your retirement provision through asset-building benefits and the REWE Pensionskasse, special benefits such as holiday and Christmas bonuses, and much more.
This text has been machine translated. Show original
Benefits
Health, Fitness & Fun
Work-Life-Integration
- 🚌Excellent Traffic Connections
- 🐕Animals Welcome
- 🏝Extra Holidays
- 🏠Home Office
- ⏸Educational Leave/Sabbatical
- ⏰Flexible Working Hours
- 🅿️Employee Parking Space
Higher Take-Home Pay
- 🏝️Summer and Christmas Bonus
- 📱Company Phone for Private Use
- 💻Company Notebook for Private Use
- 👴🏻Company Retirement Provision
- 🛍Employee Discount
- 🚎Public Transport Allowance
Food & Drink
Topics You Will Work On
Job Locations
About Your Employer
REWE Digital GmbH
As drivers of the digital innovation of the REWE Group, we are responsible for all strategic online activities of one of Europe's leading trade and tourism companies. Our most important brands at home and abroad include REWE, Penny, Billa, Merkur, BIPA, ITS , DER Touristik Meier's World Travel Jahn Reisen and Toom Hardware Store.
Description
- Company Type
- Digital Agency
- Working Model
- Hybrid, Onsite
- Industry
- Internet, IT, Telecommunication
Application Security Engineer
- Location
- Cologne
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
