Germany
ALTEN
Haufe Group
Web-App Security Engineer (d/m/w) - Remote
Germany
Freiburg im Breisgau, Baden-Württemberg, Germany
JavaScriptTypeScriptPythonJavaAWS
Automatic translation. Check the original.
Company Description
Imagine actively contributing to the security and reliability of our application, thereby protecting the data of over 1,000,000 Lexware Office users. In the Web-App Security field, that's exactly what awaits you: you'll solve exciting, challenging problems, constantly learn new technologies, and develop valuable skills in an increasingly important area.
In our Security Enablement team, we support development teams in making everything secure – from planning through development to operations. We integrate security mechanisms, analyze vulnerabilities, and are always available for security-related questions.
Are you eager to delve into this exciting field as a Web-App Security Engineer (d/m/w)? Then you're in the right place with us! Of course, we don't just work in the office, but also flexibly from home.
Job Description
- Your ideas, decisions, and activities have a direct impact on improving the security of our application. You make a product used by over 450,000 small and micro-businesses in Germany safer day by day.
- You work closely with our feature teams to support them with security questions during the conception, implementation, and operation of our application. You'll dive deep into the technical details. You also develop and maintain cross-team security mechanisms.
- In our Security Enablement team, you have the opportunity to explore new things, build them up, actively shape them, and contribute ideas. Hacking Days and occasional after-work sessions await you.
- With us, you'll find a modern, agile way of working: from DevOps to Scrum or Kanban.
Qualifications
- You have good knowledge and extensive experience in web application and cloud security (preferably with AWS) and also know how modern web applications are securely configured, built, and released (IaC, CI/CD, SDLC).
- You are able to assess vulnerabilities in the context of our application and develop a course of action. You can draw on your knowledge of Java web applications and Javascript (Typescript) web clients. You understand the functionality and configuration of well-known dependency management tools like NPM and Gradle.
- You have development experience and can quickly assess whether a task should be automated, and can write Bash, Python scripts, or other necessary tools for it.
- Threat models are not an unknown topic for you, and you are enthusiastic about designing one with colleagues, for example, on a whiteboard. You can put yourself in the mindset of an adversary to identify threats.
- You can communicate vulnerabilities and security recommendations clearly and precisely to effectively support feature teams with security-related questions.
- Our team language is German, so very good German skills (at least C2) are a must. At the same time, you should also have very good English skills.
- Bonus: You have already gained experience in incident response.
We rely on team recruiting – our team conducts the interviews themselves. We look forward to getting to know you.
Lukas is fascinated by security topics both at work and in his private life, tinkers a lot with virtual machines, enjoys meeting friends, does strength training for balance, and dances passionately.
Florian spends his free time on vulnerability research, CTFs, and at the CCC. He is also a passionate hobby chef and has a soft spot for good coffee.
Henrik is generally enthusiastic about security and all Linux-specific topics. Outside of work, he spends his time with sports, setting up home servers, or playing the guitar.
Job ID: REF347E
Classification: Grade: 5
Career level: Professionals
Classification: Function Band: DevOps Engineer
Additional Information
At Haufe Group, we create pioneering working conditions where each of us can contribute and develop optimally. With us, you receive space and responsibility, as well as the opportunity to work hybrid – meaning a combination of office presence and home office, depending on needs and agreement within your team. You also benefit from flexible working hours and have diverse training and development opportunities. We are tangible and officially a Great Place to Work®.
Lexware: Software solutions for efficient business processes.
Lexware develops commercial software solutions for self-employed individuals and small businesses, making it the market leader in Germany. With our business solutions, networks, and corporate knowledge for accounting, payroll, taxes, and finance, we take the burden off our customers. This allows them to focus on their business.
We value diversity and are convinced that employees from diverse backgrounds bring different perspectives and strengths to our company. Therefore, we welcome all applications – regardless of gender, nationality, ethnic and social origin, religion/belief, disability, age, and sexual orientation and identity. As signatories of the Diversity Charter, we are committed to diversity, tolerance, fairness, and appreciation.
More opportunities with one profile
Want to be considered for more roles without repeating the whole process? Create your profile and be found by companies using Nort.
Create my profile