As an Application Security Engineer, you will enhance security practices by integrating proactive tools, managing a bug bounty program, and fostering a culture of security within the engineering team.
Security Engineer (m/w/d)
📜 Description
- Investigate vulnerability reports, security alerts, and internal findings related to security incidents.
- Collaborate with developers on secure design, threat models, code reviews, and regression tests for high-risk product areas.
- Develop reusable security controls, developer guidelines, and automation for vulnerability detection and remediation.
- Support clear accountability and severity assessments for product security findings.
- Coordinate security releases and document technical fixes across various teams.
🛠️ Requirements
- Solid experience in software development with an interest in product or application security.
- Practical knowledge of typical application security risks, including authentication and authorization vulnerabilities.
- Ability to read and modify production code and tests, explaining risks to developers.
- Experience with threat modeling, security testing, and vulnerability analysis.
- Strong written communication skills and ability to collaborate across teams.
✨ Benefits
- Open culture with flat hierarchies and encouragement of initiative.
- Permanent contracts providing long-term security.
- Flexible working hours and options for remote work.
- Choice of work hardware.
- Structured onboarding with support from a personal buddy.
- Inspiring work environment with engaged colleagues.
- Opportunities for personal growth and development.
- Attractive benefits like company pension plans and health programs.
Full job description
Shopware ist ein führendes E-Commerce-System, das es Unternehmen weltweit ermöglicht, im digitalen Handel schnell und effizient zu skalieren. Als zukunftsweisende Open-Source-Lösung wird Shopware bereits von einigen der größten europäischen Marken, Einzelhändlern und Herstellern im B2C- und B2B-Bereich eingesetzt.
Hilf dabei, Shopware-Produkte sicherer zu machen, indem du während der gesamten Produktentwicklung Sicherheitsrisiken aufdeckst und reduzierst. Du arbeitest mit den Produktentwicklungsteams daran, Schwachstellen zu untersuchen, sichere Konzepte und Tests zu verbessern und praxisnahe Maßnahmen aufzubauen, die wiederkehrende Probleme in Commerce Core, Services und angrenzenden Produktbereichen verhindern.
Product Security Engineering ist eine Engineering-Funktion. Die Produktteams bleiben dafür verantwortlich, ihren eigenen Code zu korrigieren und zu testen. Dieses Team bringt gezielte Sicherheitsexpertise, eine gemeinsame Roadmap zur Prävention und eine klare Koordination für produktübergreifende Sicherheitsarbeit ein.
Similar jobs
Search more Cybersecurity Engineer jobsAs a Product Security Engineer, you will own security initiatives, collaborate with engineering to enhance security practices, and lead cross-functional projects to ensure robust security outcomes.
As a Product Security Engineer, you will partner with product and engineering teams to ensure secure software design, conduct security reviews, and develop frameworks that enhance security practices.
Berater für Cybersecurity / Concierge Security Engineer 2 (m/w/d)
Join Arctic Wolf as a Cybersecurity Consultant / Concierge Security Engineer 2, where you'll actively shape the future of cybersecurity and work closely with experienced engineers.
Cyber Security Engineer
The Cyber Security Engineer will ensure the security of the organization's information systems by implementing security measures and integrating security into all phases of project development.
