Application Security Engineer

• Strengthen and scale application security practices across KNIME, ensuring that products used by thousands of data professionals and Fortune 500 companies meet enterprise-grade security standards
• As Application Security Engineer, you will be the driving force behind security awareness, enablement, and engineering across KNIME’s software development organization
• You’ll embed security by design into the SDLC, manage supply chain and vulnerability risks, and collaborate closely with engineers, architects, DevSecOps, and IT/ISMS teams to continuously raise the security bar
• Raise awareness of software security across KNIME, especially within the software development organization
• Organize and lead internal trainings and workshops on security topics such as OWASP Top Ten
• Partner with software architects and engineering teams to embed security best practices early in the SDLC
• Track usage of third-party libraries through SBOM technologies, validate security issues, and ensure timely remediation
• Improve automated tooling and processes for enhancing security posture together with the DevSecOps team and engineering leaders
• Conduct periodic internal penetration tests and coordinate external penetration tests including follow-up and issue tracking
• Collaborate with IT and ISMS teams on compliance and certification topics such as ISO 27001 and SoC2

Benefits

• Flexible working hours
• Learning & coaching
• Sport programs
• Language courses
• Referral program
• Stock options plan
• Small stuff support
• Afterwork events
• Snacks
• Health checkups

Strong technical knowledge of supply chain security, authentication and authorization standards, common vulnerabilities, secure coding practices, and issue remediation Solid understanding of modern web applications and microservice architectures 5+ years of experience as an Application Security Engineer DevSecOps and programming experience with ability to work closely with engineering teams Deep interest in software security research with up-to-date knowledge of emerging threats and best practices Fluent in English; German is a plus Degree in Computer Science or a related field