11 hours ago
Berlin, Germany +3 moreSenior
Responsibilities
- Establish and lead the application security program across the Product and Technology department.
- Integrate and optimize SAST, DAST, dependency scanning, and other security tooling in CI/CD pipelines and IDEs.
- Conduct threat modeling, secure design reviews, architecture reviews, targeted code reviews, and secure coding guidance.
- Identify, triage, track, report, and help remediate vulnerabilities across internal and external applications and systems.
- Support bug bounty finding validation and present vulnerability management reports to department heads.
- Advise teams on secure development of AI/ML and LLM-powered features, including prompt injection, model misuse, data leakage, and secure integration patterns.
- Collaborate on application-layer incident investigations, root cause analysis, post-incident reviews, and longer-term mitigations.
- Own and improve the application security training program and create a Security Champions program.
- Deliver secure development workshops and technical deep-dives, and contribute to playbooks, documentation, and internal standards.
- Research emerging threats and propose innovations to improve software supply chain and platform security.
Requirements
- At least 5 years of experience in application security, product security, or related technical roles.
- Experience working directly with software engineers and product managers to secure web applications.
- Experience working in an Agile environment.
- Good spoken and written English proficiency.
- Excellent interpersonal and communication skills across organizational levels.
- Mentorship and training skills, with the ability to work across departments and multiple touch points.
- Coding proficiency in JavaScript, PHP, or Python.
- Experience with cloud-native environments, AWS, containers, and Terraform.
- Hands-on experience with DAST, SAST, SCA tools, reporting, and dashboarding platforms.
Benefits
- Four-day Flexi-Week at full pay, including one lighter or disconnected day per week without reducing annual holiday allowance.
- Hybrid/remote Flexi-office working scheme with an international culture.
- Monthly work-expense allowance and furniture package for remote working.
- Health, wellbeing, sports, and other wellbeing initiatives.
- Access to the Awin Academy training suite and professional development programs.
- Peer-to-peer recognition vouchers.
- Hiring is available in multiple countries, with additional country-specific benefits discussed during the initial interview.
Tech Stack
Categories
About Awin
Awin builds a global affiliate marketing platform that connects advertisers with publishers and influencers to drive ecommerce sales, offering tracking, partner management, and payout tools. The network serves sectors such as retail, telecommunications, travel, and finance, and monetizes via performance-based fees on referred transactions. Founded in 2000 and headquartered in Berlin, it is part of Axel Springer.