Web-App Security Engineer

Role Overview

As a Web-App Security Engineer, you will contribute to making our application secure and reliable, protecting the data of over 1,000,000 users, and developing valuable skills in web-app security. You will work in a hybrid environment, both in the office and from home, and have a direct impact on the improvement of the security of our application.

What You Will Do

You will solve exciting and challenging problems, learn new technologies constantly, and develop valuable skills in web-app security. You will work closely with feature teams to support them in security-related questions during the conception, implementation, and operation of our application.

Why It Might Be a Fit

You will have the opportunity to explore new things, build, actively shape, and bring in ideas. You will also have the chance to participate in Hacking Days and occasional after-work sessions, and contribute to the development of cross-functional security mechanisms.

Requirements

• Good knowledge and extensive experience in the field of web application and cloud security (preferably with AWS)
• Knowledge of modern web applications and how they are configured, built, and released safely (IaC, CI/CD, SDLC)
• Experience with Java web applications and JavaScript (TypeScript) web clients
• Understanding of well-known dependency management tools such as NPM and Gradle
• Development experience and ability to quickly assess whether a task should be automated
• Ability to evaluate vulnerabilities in the context of our application and develop a recommendation for action
• Ability to convey vulnerabilities and security recommendations in a clear and precise manner
• Experience in the Incident Response area (plus point)

Benefits

• Hybrid working environment
• Flexible working hours
• Opportunities for further education and development
• Great Place to Work certification