Application security engineer

Описание:

At Diconium, we do digital business transformation across various industries. As a team member, you will work on projects that generate value from software, data, and AI by delivering strategies and solutions that challenge conventional industry practices and drive technological progress. Together with over 2,300 fellow experts, you enable Fortune 500 firms, global market leaders, and SMEs to maximize the impact of their digital initiatives and achieve digital excellence.

Задачи:

• You advise agile software development teams in the area of security. This includes the prevention, detection, and remediation of vulnerabilities.
• You identify risks in applications, assess them, and work with the teams to find suitable countermeasures.
• You conduct code reviews, threat modeling, and security tests.
• You audit our projects and support our teams during external audits.
• You actively contribute to monitoring and continuously improving the security standards of our applications and processes.
• You administer and further develop our security tool stack.

Требования:

• Solid knowledge of agile software development and experience with Java, JavaScript, and TypeScript.
• Familiarity with modern architectural concepts such as microservices, event-driven systems, web services, and cloud-native solutions.
• Practical experience in application security, especially in DevSecOps, SAST, DAST, and secure coding best practices.
• Ability to identify security risks and develop appropriate measures.
• Experience with security standards such as NIST, ISO27001, BSI, NIS2 and their application in projects.
• Knowledge of tools like OWASP ZAP, SonarQube, Burp Suite or similar.
• Professional English skills for collaboration in international teams.
• A valid working permission for the EU.
• Будет плюсом: German skills are a plus

Условия:

Develop yourself both professionally and personally through training programs, free language courses, competence centers and an active tech community. Benefit from hybrid work, workation, flexible hours, parental support and sabbaticals. Engage in our Sustainability Hub, diverse communities, Diversity Taskforce and after-work activities. Enjoy public transport tickets, job bikes, health offers, supplementary insurances, a pension plan and various discounts.