Web Application Security Engineer - Remote

Stack

Responsibilities

• ▹Support development teams on security matters from concept through implementation to operations
• ▹Develop and operate cross-team security mechanisms
• ▹Assess vulnerabilities in the context of the application and develop recommendations for action
• ▹Collaboratively build threat models with colleagues, e.g. on a whiteboard
• ▹Communicate vulnerabilities and security recommendations clearly and precisely to development teams

Requirements

• ▹Good knowledge and extensive experience in web application and cloud security (AWS preferred)
• ▹Knowledge of how modern web applications are securely configured, built, and released (IaC, CI/CD, SDLC)
• ▹Knowledge of Java web applications and JavaScript (TypeScript) web clients
• ▹Understanding of dependency management tools such as NPM and Gradle
• ▹Development experience, able to automate tasks with Bash or Python scripts
• ▹Ability to build threat models and think like an adversary to identify threats
• ▹Clear, precise communication of vulnerabilities and security recommendations
• ▹Team language is German, so very good German (min. C2) is a must, along with very good English

Nice to have

• ▹Experience in incident response

Soft skills

What we offer

• ▹Hybrid work: combination of office and home office
• ▹Flexible working hours
• ▹Diverse training and development opportunities
• ▹Hacking Days and after-work sessions
• ▹Great Place to Work® certified

About the company

Lexware, part of the Haufe Group, is Germany's market-leading developer of business software solutions for the self-employed and small businesses, covering accounting, payroll, tax, and finance.