Application Security Engineer (m/f/d)

EPG is one of the leading international providers of a comprehensive supply chain execution suite (EPG ONE™) and offers you excellent development prospects.

• Contribute ideas. And implement them.
• The industry of the present. And the future.

Teamwork has been a top priority for us right from the start. We work together internationally at several locations with more than 1,000 employees.

• Onboarding to arrive.
• Tasks to get ahead.

We offer flexible working hours, a fitness room with a range of courses, regular employee events and a company kindergarten at the company headquarters in Boppard.

• Working hours and location? Flexible.
• Together and culture? On an equal footing.

Work location

Boppard, Dortmund, Hamburg, Köln

THE POSITION - This is what we are all about

Help us build software that is secure by design. As an Application Security Engineer (m/f/d), you work closely with our development teams to identify security risks early, improve secure coding practices, and strengthen the security of our SaaS platform. With a white-hat hacker mindset, you think like an attacker – and help our developers stay one step ahead.

THE TASKS - You make a difference

• Advise development teams on secure software design, architecture and coding practices.
• Review security-critical code, components and APIs to identify vulnerabilities and recommend practical solutions.
• Evaluate and integrate security tools and automated security checks into our development and CI/CD processes.
• Analyze potential attack vectors and validate vulnerabilities using ethical hacking and application security techniques.
• Drive application security standards and continuously strengthen security awareness within our engineering teams.

THE REQUIREMENTS - What makes you successful

• Practical experience in Application Security, Software Security or Secure Software Development.
• Strong understanding of common application vulnerabilities, attack techniques and secure coding principles.
• Experience with code reviews, security testing and vulnerability analysis.
• Familiarity with security tools such as SonarQube, JFrog Xray or comparable SAST/SCA solutions.
• Knowledge of cloud-native environments, APIs and modern software development processes; experience with Kubernetes and CI/CD is an advantage.