Application Security Engineer (m/f/d) in Konstanz or Berlin

In this role you strengthen and scale KNIME's application security across the organization, helping data professionals work securely without sacrificing speed. You’ll work with cross-functional teams to embed security by design in modern web and microservice architectures. You’ll lead security awareness, training, and remediation efforts while staying current with emerging threats and tools. This position offers the chance to impact security posture at scale in a globally distributed, open-source company.

• Security with impact
• Ownership & influence
• Collaboration at depth
• Continuous learning
• Subsidized gym memberships
• Hybrid or remote options with flexible hours

• Raise awareness of software security across KNIME, especially within the software development organization
• Organize and lead internal trainings and workshops on security topics
• Partner with software architects and engineering teams to apply security best practices early in the SDLC
• Track usage of third-party libraries through SBOM technologies and coordinate remediation
• Improve automated tooling and processes to enhance security posture with the DevSecOps team and engineering leaders
• Conduct internal penetration tests and coordinate external tests with follow-up and issue tracking
• Collaborate with IT and ISMS teams on security, compliance, and certification topics (e.g., ISO 27001, SoC2)

• Degree in Computer Science or related field and ≥5 years of Application Security engineering experience
• Strong technical knowledge of supply chain topics, authentication/authorization standards, vulnerabilities, secure coding, and remediation
• Research-driven with interest in software security and awareness of emerging threats, tools, and practices
• Understanding of modern web applications and microservice architectures; ability to embed security by design
• Hands-on DevSecOps experience and programming capability; comfortable collaborating with engineering teams
• Fluent in English; German is a plus
• Ability to explain complex security topics clearly and pragmatically

• clear communication
• collaboration
• ability to explain complex security topics
• security by design in SDLC
• supply chain security and SBOM technologies
• authentication and authorization standards