Level: Experienced

Job Field: IT, Security

Employment Type: Full Time

Contract Type: Permanent employment

Location: Nuremberg

Working Model: Hybrid, Onsite

Job Summary

In this role, you will advise development teams on implementing security requirements for cloud-native applications and conduct risk analyses as well as penetration tests to optimize application security.

Your role in the team

Consulting and supporting development teams in implementing modern security requirements for cloud-native applications.
Provision of expertise on security architectures, security standards, and secure software architectures.
Analysis, assessment, and prioritization of identified vulnerabilities using established security tools.
Support for penetration tests as well as conducting threat and risk analyses.
Ensuring compliance with current security policies, governance standards, and compliance requirements.
Support in the development, monitoring, and further development of relevant security metrics.
Contribution to the continuous optimization of the Secure Software Development Lifecycle (Secure SDLC).
Close collaboration with interdisciplinary teams to sustainably improve application security.

This text has been machine translated. Show original

Our expectations of you

Qualifications

Knowledge in the implementation and further development of security processes.
Knowledge in handling SAST and SCA tools, including assessment and prioritization of security findings.
In-depth understanding of web services, APIs, as well as common vulnerabilities and attack scenarios of distributed systems.
Ability to analyze, assess, and prioritize security risks as well as derive appropriate measures.
Strong communication skills and confident demeanor when interacting with both technical and non-technical stakeholders.
Structured, autonomous, and solution-oriented working style with a high degree of initiative.

Experience

Professional experience in Application Security, DevSecOps, or Secure Software Development Lifecycle (Secure SDLC).
Experience with CI/CD pipelines as well as the integration of automated security checks and quality gates.

This text has been machine translated. Show original

What we offer

Option for hybrid working.
Working in a technologically attractive work environment.
Intensive onboarding and attractive training opportunities.
Flexible working hours.
Various health measures offers.
Participation in various activities, such as the 'Nuremberg Company Run' and 'Bike to Work'.
Company cafeteria (including meal subsidy).
Excellent public transportation connections.