Junior Application Security Engineer (all genders)
About You SE & Co. KG8 hours ago
Hamburg, GermanyEntry Level
Responsibilities
- Conduct regular penetration tests and application security assessments.
- Perform secure code reviews across cloud environments.
- Advise on the setup and maintenance of applications and infrastructure, typically hosted in AWS and Kubernetes.
- Triage, remediate, and track monitoring events.
- Optimize and automate security review processes, including building attack infrastructure, writing Python scripts, and implementing security scans in GitLab CI/CD.
- Contribute to SOC incident-response activities, including occasional 24/7 on-call coverage.
- Collaborate with Security Engineers, developers, and IT teams on security best practices and emerging threats.
Requirements
- At least one year of experience in Application Security.
- Ability to perform active application security assessments and penetration tests.
- Required Python development and scripting skills.
- Knowledge of secure system architecture, threat modeling, and security engineering practices.
- Ability to conduct secure code reviews across cloud environments.
- Knowledge of Laravel and PHP, and ability to read and understand JavaScript and Go.
- Experience with incident response, Web Application Firewalls, CDN providers, and GitLab CI/CD pipelines is advantageous.
- Experience with AWS or GCP is preferred; Azure knowledge is beneficial.
- Experience with red-teaming operations and offensive security strategies is advantageous.
- Security certifications such as OSCP or OSWP are advantageous.
Benefits
- Inclusive workplace focused on acceptance, inclusion, and fairness.
- Flat hierarchies, direct communication, pragmatic decision-making, team lunches, after-work drinks, company events, and informal team gatherings.
- Hamburg and Berlin are stated as company locations.
Tech Stack
Categories
About About You SE & Co. KG
ABOUT YOU SE & Co. KG operates an online fashion marketplace for European consumers and licenses commerce technology to brands via its SCAYLE platform. The group sells apparel and lifestyle products through its mobile app and aboutyou.com, and offers a cloud-based enterprise shop system under a license model to retailers. Founded in 2014 and headquartered in Hamburg, it is a publicly listed company.