Software Engineer (Security) () (m/w/d)

Software Engineer (Security)

Ensure the security and integrity of web applications at CLARK, combining deep technical expertise in PHP and Vue.js development with strong cybersecurity practices to identify vulnerabilities, implement safeguards, and develop secure code.

Responsibilities

• Develop secure backend systems using PHP, mitigating risks such as SQL injection, cross‑site scripting (XSS), and other vulnerabilities.
• Ensure frontend security using Vue.js by implementing input validation, secure routing, and content security policies.
• Design and integrate secure RESTful APIs, ensuring encryption and authentication best practices.
• Conduct vulnerability assessments and penetration tests on PHP and Vue.js applications.
• Implement tools and processes to automate threat detection, renovate processes and monitor to identify outdated externals and build concepts to remove these dependencies.
• Stay updated with the latest security patches for PHP, Vue.js and associated libraries/frameworks.
• Work closely with security and development teams to integrate security into the software development lifecycle (SDLC).
• Educate team members on secure coding practices and emerging security threats.

Qualifications

• 3+ years of experience in software development with a focus on security.
• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or a related field.
• Strong expertise in modern, object‑oriented PHP development, including frameworks such as Laravel, Symfony, or Zend.
• Proficiency in Vue.js and its ecosystem (Vuex, Vue Router, etc.).
• In‑depth understanding of common web application vulnerabilities (OWASP Top 10) and secure coding practices.
• Experience with penetration testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis.
• Knowledge of current IT risks and security protocols, authentication, and authorization.
• Previous experience building security countermeasures against attacks on web, backend, and database levels.
• Attention to detail and proactive approach to identifying potential security risks.
• Ability to work effectively in a fast‑paced, team‑oriented environment.
• Sensitivity to security challenges in large, international projects.

Benefits

• Diverse multicultural environment with colleagues from over 40 backgrounds.
• Hybrid working model and flexible hours for work‑life balance.
• 30 days of holiday plus 2 impact days to pursue passions and give back.
• Exclusive discounts tailored to employees.
• Complimentary drinks, fresh fruit, and snacks.
• Access to cultural initiatives and team events.