Junior Application Security Engineer (all genders)

We are looking for a Junior Application Security Engineer (all genders) to join the Application Security circle of our IT-Security unit, dedicated to protecting our online shop, our corporate systems and our customers.
In this role, you will hack internal systems, design and implement security measures to safeguard our infrastructure, applications, and data. You will work closely with other security engineers, developers and IT teams to ensure security best practices, automate security processes, and respond to emerging threats. This position contains:
Conduct regular penetration tests and code reviews
Advise in the setup and maintenance of applications and infrastructure (usually hosted in AWS/Kubernetes)
Triage and respond to monitoring events
Optimization and automation of security auditing processes. This could also include setting up attack infrastructure, writing scripts in Python and implementing security scanning in Gitlab CI.
Take part in some incident response activities within the SOC, which include occasional 24/7 on-call
At least one year of application security experience
Able to perform active application security assessments and penetration testing
Nice to have:
Develop and script using Python (Required; PHP, JavaScript, or Go preferred)
Architect secure systems using threat modeling and security engineering practices
Conduct secure code reviews across cloud environments (AWS/GCP preferred; Azure a plus)
Execute red teaming operations and offensive security strategies
Certificates: e.g. OSCP, OSWP, etc.
Knowledge of Laravel / PHP.
Ability to read and understand JavaScript
Ability to read and understand Go
Experience with incident response activities
Experience with web application firewalls, CDN providers, e.g. Cloudflare, Akamai
Experience with Gitlab CI/CD Pipelines

Employment type
Full-time

Work arrangement
Hybrid