Germany
ALTEN
Haufe Group
Web-App Security Engineer (m/f/d) - Remote
Germany
Freiburg im Breisgau, Baden-Württemberg, Germany
JavaScriptTypeScriptPythonJavaAWS
Automatic translation. Check the original.
About the Company
Imagine actively contributing to the security and reliability of our application, thereby protecting the data of over 1,000,000 Lexware Office users. In the Web-App Security field, that's exactly what awaits you: you'll solve exciting, challenging problems, constantly learn new technologies, and develop valuable skills in an increasingly important area.
In our Security Enablement team, we support development teams in ensuring security throughout the entire process – from planning and development to operation. We integrate security mechanisms, analyze vulnerabilities, and are always available for security-related questions.
Are you eager to delve into this exciting field as a Web-App Security Engineer (m/f/d)? Then you've come to the right place! Of course, we work not only in the office but also flexibly from home.
Job Description
- Your ideas, decisions, and activities will have a direct impact on improving the security of our application. You'll make a product used daily by over 450,000 small and micro-businesses in Germany more secure.
- You will work closely with our feature teams to support them with security-related questions during the conception, implementation, and operation of our application. You'll dive deep into the technical details. Additionally, you will develop and maintain cross-team security mechanisms.
- In our Security Enablement team, you'll have the opportunity to explore new things, build, actively shape, and contribute ideas. Expect Hacking Days and occasional after-work sessions.
- With us, you'll find a modern, agile way of working: from DevOps to Scrum or Kanban.
Qualifications
- You have good knowledge and extensive experience in web application and cloud security (preferably with AWS) and also know how modern web applications are securely configured, built, and released (IaC, CI/CD, SDLC).
- You are capable of assessing vulnerabilities in the context of our application and developing a course of action. You can draw on your knowledge of Java web applications and Javascript (Typescript) web clients. You understand the functionality and configuration of well-known dependency management tools like NPM and Gradle.
- You have development experience and can quickly assess whether a task should be automated, and can write Bash, Python scripts, or other necessary tools for it.
- Threat models are not an unknown topic for you, and you are enthusiastic about designing one with colleagues, for example, on a whiteboard. You can put yourself in the mindset of an adversary to identify threats.
- You can communicate vulnerabilities and security recommendations clearly and precisely to effectively support feature teams with security-related questions.
- Our team language is German, so very good German skills (at least C2) are a must. At the same time, you should also have very good English skills.
- Bonus: You have already gained experience in incident response.
We rely on team recruiting – our team conducts the interviews themselves. We look forward to getting to know you.
Lukas is fascinated by security topics both at work and in his private life, tinkers a lot with virtual machines, enjoys meeting friends, engages in strength training for balance, and dances passionately.
Florian spends his free time on vulnerability research, CTFs, and at the CCC. He is also a passionate hobby cook and has a soft spot for good coffee.
Henrik is generally enthusiastic about security and all Linux-specific topics. Outside of work, he spends his time with sports, setting up home servers, or playing the guitar.
Job ID: REF347E
Classification: Grade: 5
Career level: Professionals
Classification: Function Band: DevOps Engineer
Additional Information
At Haufe Group, we create pioneering working conditions where each of us can contribute and develop optimally. With us, you'll receive space and responsibility, as well as the opportunity to work hybrid – meaning a combination of office presence and home office, depending on needs and team agreement. You'll also benefit from flexible working hours and diverse training and development opportunities. We are tangible and officially a Great Place to Work®.
Lexware: Software solutions for efficient business processes.
Lexware develops commercial software solutions for self-employed individuals and small businesses, making it the market leader in Germany. With our business solutions, networks, and corporate knowledge for accounting, payroll, taxes, and finance, we take the burden off our customers. This allows them to focus on their business.
We value diversity and are convinced that employees from diverse backgrounds bring different perspectives and strengths to our company. Therefore, we welcome all applications – regardless of gender, nationality, ethnic and social origin, religion/belief, disability, age, or sexual orientation and identity. As signatories of the Diversity Charter, we are committed to diversity, tolerance, fairness, and appreciation.
More opportunities with one profile
Want to be considered for more roles without repeating the whole process? Create your profile and be found by companies using Nort.
Create my profile