Requirements

• Solid foundational knowledge of web and mobile application security principles and common vulnerability types (OWASP Top 10)
• Ability to read and understand code in at least one modern programming language such as Java, Python, Go, or TypeScript
• Experience reproducing application vulnerabilities and using tools like Burp Suite or OWASP ZAP
• Basic understanding of CI/CD systems and integration of automated security scanners (SAST/SCA)
• Exposure to cloud computing principles (AWS, GCP, or Azure) and container concepts like Docker and Kubernetes
• Eagerness to learn and utilize AI-driven tools for security automation and analysis
• Strong collaborative and empathetic communication skills to partner effectively with software engineers

Nice to Haves

• Experience participating in Bug Bounty programs or Capture The Flag (CTF) competitions
• Familiarity with authentication and authorization standards such as OAuth 2.0, OIDC, or SAML
• Industry certifications focusing on foundational security skills like Security+, eJPT, or GWAPT

What You'll Be Doing

• Conduct security assessments, review code, and assist product teams in remediating application-layer vulnerabilities
• Manage Bug Bounty and Vulnerability Disclosure Programs including triaging and validating reported flaws
• Implement and maintain automated security testing tools (SAST, DAST, SCA) in CI/CD pipelines
• Facilitate threat modeling sessions and architectural reviews for new features and microservices
• Support initiatives leveraging security automation and AI-driven tools for optimizing vulnerability triage and code analysis
• Track remediation progress against metrics like Mean Time to Remediate (MTTR) and SLA adherence
• Provide guidance to software engineers on secure coding standards and best practices

Perks and Benefits

• Hybrid working model with 2 days per week in the Berlin office
• 27 days holiday plus extra days on second and third year of service
• 1,000 € educational budget, language courses, parental support, and access to Udemy Business platform
• Health checkups, meditation, and gym facilities
• Employee share purchase plan, sabbatical bank, public transportation discount, life and accident insurance, and corporate pension plan
• Digital meal vouchers and food vouchers
• Support for relocation to Berlin including resources and a relocation hub