Web-App Security Engineer (d/m/w) - Blue Team - Remote
Haufe Group14 hours ago
Freiburg im Breisgau, GermanySenior
Responsibilities
- Support feature teams with security questions during application conception, implementation, release, and operation.
- Assess vulnerabilities and security events in the context of web applications and develop recommended actions.
- Conduct threat modeling and evaluate systems from an attacker’s perspective.
- Develop and maintain cross-team security mechanisms for web applications and cloud environments.
- Perform blue-team activities including detection engineering, threat hunting, log engineering, and telemetry engineering.
- Automate suitable security tasks using Bash, Python scripts, or other necessary tools.
- Contribute to incident response and help develop a cross-functional Purple Team.
Requirements
- Good knowledge and extensive experience in web-application and cloud security, preferably with AWS.
- Knowledge of securely configuring, building, and releasing modern web applications.
- Experience with infrastructure as code, CI/CD, and the software development lifecycle.
- Ability to assess vulnerabilities and security events and formulate appropriate recommendations.
- Fundamental blue-team experience in cloud environments and a strong interest in detection engineering.
- Knowledge of Java web applications and JavaScript or TypeScript web clients is advantageous.
- Practical incident-response experience is beneficial.
- Very good German skills at least at C2 level and very good English skills.
- Ability to determine when tasks should be automated and implement suitable scripts or tools.
Benefits
- Hybrid work combining office presence and home office according to team needs and agreement.
- Flexible working hours.
- Space, responsibility, and opportunities to contribute ideas and shape the Security Enablement team.
- Wide-ranging training and professional development opportunities.
- Hacking Days, threat-hunting sessions, and occasional after-work sessions.
Tech Stack
Categories
About Haufe Group
Haufe Group builds software and digital content for finance, tax, HR, and legal workflows, along with corporate learning via Haufe Akademie. Its portfolio includes brands such as Lexware and Haufe umantis, delivered primarily as subscriptions and cloud services to SMEs and enterprises in the DACH region. Founded in 1951, the privately held company is headquartered in Freiburg im Breisgau, Germany.