Senior Application Security Engineer (m/w/d) - IT Security - ABOUT YOU Holding AG

We are looking for a Senior Application Security Engineer to join our Application Security circle, dedicated to protecting our online shop, corporate system, and customers. In this role, you will hack internal systems, design and implement security measures to safeguard our infrastructure, applications, and data, working closely with other security engineers, developers, and IT teams.

Activities

• Conduct regular penetration tests and code reviews
• Advise in the setup and maintenance of applications and infrastructure (usually hosted in AWS/Kubernetes)
• Triage monitoring events
• Optimization and automation of security auditing processes. This could also include setting up attack infrastructure, writing scripts in Python/Bash, and implementing security scanning in Gitlab CI.

Qualifications

• At least 5 years of hands‑on experience in the IT Security field.
• Experience in pentesting, ethical hacking, bug bounties and the tooling used for that (e.g. Burpsuite)
• Proficient in Linux for the purpose of vulnerability detection
• Hands‑on security‑related experience with a major provider of cloud solutions. AWS is preferable.
• Good knowledge of a programming language (like Python).
• Good knowledge of PHP.
• Fluent English: spoken and written.

Team

You will join the Application Security circle of our IT‑Security unit.