Application Security Engineer

Developer Software | CyberSecurity | Application Security | Product Security | DevSecOps

Our client, a growing Developer Software company based in Munich, is looking for an Application Security Engineer to strengthen security across modern applications, APIs, and software development workflows.

You'll work at the intersection of CyberSecurity and Software Engineering, identifying vulnerabilities, improving secure development practices, and building automated security controls that help engineering teams deliver reliable, secure software.

Core Skills

• 3+ years in Application Security, Product Security, Software Security, or a similar role
• Application and API Security
• Python or similar scripting experience
• CI/CD security integration
• OWASP Top 10 and common application vulnerabilities
• Experience working directly with software engineering teams

Nice to Have

• Burp Suite / OWASP ZAP
• Semgrep / SonarQube / Checkmarx
• Software Composition Analysis (SCA)
• GitHub Actions / GitLab CI
• API penetration testing
• JWT / session security
• Software supply-chain security
• Infrastructure as Code security
• DevSecOps practices
• Experience securing SaaS or developer-facing products