13 hours ago
Berlin, Germany +3 moreSenior
Responsibilities
- Establish and lead the application security program and advocate for AppSec across Product and Technology.
- Integrate and optimise SAST, DAST, and dependency-scanning tools in CI/CD pipelines and IDEs.
- Conduct threat modelling, secure design reviews, code reviews, and architecture reviews with engineering and product teams.
- Identify, triage, track, report, and remediate vulnerabilities across internal and external applications and systems.
- Support bug bounty validation, vulnerability reporting to department heads, and application-layer incident investigations.
- Advise teams on secure development of AI/ML and LLM-powered features, including prompt injection, model misuse, and data leakage risks.
- Create and run a Security Champions program, security training, workshops, technical deep-dives, playbooks, and internal standards.
- Research emerging threats and propose security improvements across the software supply chain and platforms.
Requirements
- At least 5 years of experience in application security, product security, or related technical roles.
- Experience working directly with software engineers and product managers to secure web applications.
- Experience working in an Agile environment.
- Good spoken and written English proficiency and strong communication skills across organisational levels.
- Mentorship and training skills, with the ability to work across departments and multiple touch points.
- Coding proficiency in JavaScript, PHP, or Python.
- Experience with cloud-native environments, AWS, containers, and Terraform.
- Hands-on experience with DAST, SAST, SCA tools, reporting, and dashboarding platforms.
Benefits
- Four-day Flexi-Week at full pay, with one lighter or completely disconnected day per week and no reduction in annual holiday allowance.
- Hybrid/remote Flexi-office working scheme in an international culture.
- Monthly work-expense allowance and furniture package for remote working.
- Health and wellbeing support, initiatives, and sports offers.
- Access to the Awin Academy training suite and professional development programs.
- Peer-to-peer recognition vouchers.
- Hiring is available in multiple countries, with additional country-specific benefits discussed during the initial interview.
Tech Stack
Categories
About Awin
Awin builds a global affiliate marketing platform that connects advertisers with publishers and influencers to drive ecommerce sales, offering tracking, partner management, and payout tools. The network serves sectors such as retail, telecommunications, travel, and finance, and monetizes via performance-based fees on referred transactions. Founded in 2000 and headquartered in Berlin, it is part of Axel Springer.