Junior Application Security Engineer (all genders)
About You SE & Co. KG3 days ago
Hamburg, GermanyEntry Level
Responsibilities
- Conduct regular penetration tests and application security assessments.
- Perform secure code reviews and advise on secure application and infrastructure setup.
- Design and implement security measures using threat modeling and security engineering practices.
- Automate security auditing processes, write Python scripts, and implement security scanning in GitLab CI/CD.
- Set up attack infrastructure and execute red teaming and offensive security activities.
- Triage monitoring events and participate in incident response activities within the SOC.
- Support occasional 24/7 on-call operations.
Requirements
- At least one year of application security experience.
- Ability to perform active application security assessments and penetration testing.
- Required Python development and scripting skills.
- Ability to architect secure systems using threat modeling and security engineering practices.
- Experience conducting secure code reviews across cloud environments.
- Knowledge of Laravel and PHP, plus ability to read JavaScript and Go.
- Experience with incident response activities, web application firewalls, CDN providers, and GitLab CI/CD pipelines.
- AWS or GCP experience preferred; Azure experience is a plus.
- OSCP, OSWP, or similar security certifications are desirable.
Benefits
- Inclusive workplace committed to acceptance, inclusion, and fairness.
- Flat hierarchies, direct communication, pragmatic decisions, ownership, and clear responsibility.
- Team lunches, afterwork drinks, company events, and informal coffee breaks.
Tech Stack
Categories
About About You SE & Co. KG
ABOUT YOU SE & Co. KG operates an online fashion marketplace for European consumers and licenses commerce technology to brands via its SCAYLE platform. The group sells apparel and lifestyle products through its mobile app and aboutyou.com, and offers a cloud-based enterprise shop system under a license model to retailers. Founded in 2014 and headquartered in Hamburg, it is a publicly listed company.