Junior Application Security Engineer (all genders)
About You SE & Co. KG7 hours ago
Hamburg, GermanyEntry Level
Responsibilities
- Conduct regular application security assessments, penetration tests, code reviews, and occasional red-team operations.
- Design and implement security measures for infrastructure, applications, and data using threat modeling and security engineering practices.
- Advise on the setup and maintenance of applications and infrastructure hosted in AWS and Kubernetes.
- Triage and respond to monitoring events and participate in SOC incident-response activities, including occasional 24/7 on-call.
- Optimize and automate security-auditing processes, including attack infrastructure, Python scripting, and security scanning in GitLab CI.
Requirements
- At least one year of application security experience.
- Ability to perform active application security assessments and penetration testing.
- Required Python development and scripting skills; PHP, JavaScript, or Go experience is preferred.
- Ability to architect secure systems using threat modeling and security engineering practices.
- Experience conducting secure code reviews across cloud environments, preferably AWS or GCP; Azure is a plus.
- Experience with incident response, web application firewalls, CDN providers, and GitLab CI/CD pipelines.
- Knowledge of Laravel and PHP, and ability to read and understand JavaScript and Go.
- Certifications such as OSCP or OSWP are beneficial.
Benefits
- Inclusive and confidential workplace with an emphasis on acceptance, inclusion, and diverse perspectives.
- Company culture featuring flat hierarchies, direct communication, pragmatic decision-making, ownership, and trust.
- Team lunches, afterwork drinks, company events, and informal coffee breaks.
Tech Stack
Categories
About About You SE & Co. KG
ABOUT YOU SE & Co. KG operates an online fashion marketplace for European consumers and licenses commerce technology to brands via its SCAYLE platform. The group sells apparel and lifestyle products through its mobile app and aboutyou.com, and offers a cloud-based enterprise shop system under a license model to retailers. Founded in 2014 and headquartered in Hamburg, it is a publicly listed company.