Application Security Engineer (all genders)

In this role you will advise agile software teams on security, addressing vulnerabilities from prevention to remediation. You’ll identify risks, assess countermeasures, and contribute to code reviews, threat modeling, and security testing. You will support external audits, monitor and improve security standards, and maintain the security tool stack. This role supports Diconium’s mission to enable digital excellence for Fortune 500 firms, global leaders, and SMEs while fostering a people-centric, flexible work environment.

• hybrid work
• flexible hours
• public transport tickets
• job bikes
• health offers
• pension plan

• Advise agile software teams on security and vulnerability management
• Identify and assess application risks and implement countermeasures
• Perform code reviews, threat modeling, and security testing
• Audit projects and support external audit processes
• Monitor and continuously improve security standards across applications and processes
• Administer and develop the security tool stack

• Solid knowledge of agile software development with Java, JavaScript, and TypeScript
• Familiarity with microservices, event-driven architectures, web services, and cloud-native solutions
• Experience in application security (DevSecOps, SAST, DAST, secure coding)
• Ability to identify security risks and implement measures
• Experience with security standards (NIST, ISO27001, BSI, NIS2) in projects
• Knowledge of OWASP ZAP, SonarQube, Burp Suite or similar
• Professional English; German skills a plus
• EU working permission

• Team collaboration
• Clear communication
• Analytical mindset
• DevSecOps
• SAST
• DAST