Job
In this role, you will test applications for security vulnerabilities, implement protective measures, and develop scripts in Python while closely collaborating with other IT teams to proactively address threats.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- We are looking for a Junior Application Security Engineer (all genders) to join the Application Security circle of our IT-Security unit, dedicated to protecting our online shop, our corporate systems and our customers.
- In this role, you will hack internal systems, design and implement security measures to safeguard our infrastructure, applications, and data.
- You will work closely with other security engineers, developers and IT teams to ensure security best practices, automate security processes, and respond to emerging threats.
- Conduct regular penetration tests and code reviews.
- Advise in the setup and maintenance of applications and infrastructure (usually hosted in AWS/Kubernetes).
- Triage and respond to monitoring events.
- Optimization and automation of security auditing processes.
- This could also include setting up attack infrastructure, writing scripts in Python and implementing security scanning in Gitlab CI.
- Take part in some incident response activities within the SOC, which include occasional 24/7 on-call.
Our expectations of you
Qualifications
- In der Lage, aktive Anwendungssicherheitsbewertungen und Penetrationstests durchzuführen.
- Develop and script using Python (Required; PHP, JavaScript, or Go preferred).
- Architect secure systems using threat modeling and security engineering practices.
- Conduct secure code reviews across cloud environments (AWS/GCP preferred; Azure a plus).
- Execute red teaming operations and offensive security strategies.
- Certificates: e.g. OSCP, OSWP, etc.
- Knowledge of Laravel / PHP.
- Ability to read and understand JavaScript.
- Ability to read and understand Go.
Experience
- At least one year of application security experience.
- Erfahrung mit Incident-Response-Aktivitäten.
- Experience with web application firewalls, CDN providers, e.g. Cloudflare, Akamai.
- Experience with Gitlab CI/CD pipelines.
What we offer
- All your information will be kept confidential according to EEO guidelines.
Benefits
Work-Life-Integration
Health, fitness & fun
Food & drink
Topics you will work on
Job locations
About your employer
As a rapidly growing online fashion retailer in Europe, ABOUT YOU has won multiple awards. As a fashion company and technology company, we work together to make the shopping experience more inspiring and personal for our customers.
- English
- Established Company
- Onsite, Hybrid, Full Remote
- Trade · Internet, IT, Telecommunication
Employer reviews
- Working conditions
- 4.0
- Career growth
- 3.7
- Team culture
- 3.5
- Engineering
- 3.6
More jobs
These jobs might also interest you
Area of responsibility “DRV Bund IT” is the service provider for Deutsche Rentenversicherung Bund, developing and operating a complex IT system landscape in close coordination with its customers. Our “IT4IT” domain provides IT departments across DRV...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
Lead our Stuttgart IT team, both professionally and as line manager, set priorities, and support each team member's development. Ensure the secure, reliable, and efficient operation of our heterogeneous IT infrastructure, including networks, servers,...