{"id":235541,"url":"https://alion.io/job/about-you-application-security-engineer-all-genders-3","title":"Application Security Engineer (all genders)","company":{"id":3531,"name":"About You","domain":"aboutyou.de","url":"https://alion.io/company/aboutyou","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":25,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":29,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hamburg, Germany"],"countries":["DE"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":65000,"max":75000,"currency":"EUR","period":"year","gross":null,"usd_annual":84235},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"GCP","optional":false},{"name":"GitLab CI","optional":false},{"name":"Kubernetes","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Akamai","optional":true},{"name":"CI/CD","optional":true},{"name":"Cloudflare","optional":true},{"name":"JavaScript","optional":true},{"name":"Laravel","optional":true},{"name":"PHP","optional":true}],"status":"live","first_seen_at":"2026-09-04T11:26:28Z","employer_posted_date":"2026-09-04","last_verified_at":"2026-10-24T00:14:27Z","board_verified":true,"closed_at":null,"days_open":49,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":49},"description":"Wir suchen einen Application Security Engineer (all genders), der dem Application Security Circle unserer IT-Security-Einheit beitritt, die sich dem Schutz unseres Onlineshops, unserer Unternehmenssysteme und unserer Kunden widmet.\nIn dieser Rolle wirst du interne Systeme hacken sowie Sicherheitsmaßnahmen entwickeln und implementieren, um unsere Infrastruktur, Anwendungen und Daten zu schützen. Du wirst eng mit anderen Security Engineers, Entwicklern und IT-Teams zusammenarbeiten, um Best Practices der Sicherheit zu gewährleisten, Sicherheitsprozesse zu automatisieren und auf aufkommende Bedrohungen zu reagieren.\nDurchführung regelmäßiger Penetrationstests und Code-Reviews\n\nBeratung bei der Einrichtung und Wartung von Anwendungen und Infrastruktur (in der Regel gehostet in AWS/Kubernetes)\n\nTriagierung von und Reaktion auf Überwachungsereignisse (Monitoring Events)\n\nOptimierung und Automatisierung von Sicherheitsaudit-Prozessen. Dies könnte auch das Einrichten von Angriffsinfrastruktur, das Schreiben von Skripten in Python und die Implementierung von Security-Scanning in GitLab CI umfassen\n\nTeilnahme an einigen Incident-Response-Aktivitäten innerhalb des SOC, was gelegentlichen 24/7-Rufbereitschaftsdienst beinhaltet\n\n Mindestens 1+ Jahr Erfahrung in einer Junior-Position sowie insgesamt mindestens 2+ Jahre Berufserfahrung im Bereich Application Security\nFundierte Kenntnisse in Threat Modeling, Penetration Testing und manuellen Secure Code Reviews\nFließende Kenntnisse in Python zur Sicherheitsautomatisierung, Tool-Entwicklung und Code-Analyse\nSolide praktische Erfahrung bei der Absicherung moderner Cloud-Umgebungen (AWS oder GCP)\nNachgewiesene Fähigkeit zur Steuerung komplexer technischer Sicherheitsprojekte, Abstimmung von Abhängigkeiten und Nachverfolgung von Ergebnissen über funktionsübergreifende Entwicklungsteams hinweg\nNice to Have:\nZertifikate: z. B. OSCP, OSWP, etc.\nKenntnisse in Laravel / PHP\nFähigkeit, JavaScript zu lesen und zu verstehen\nFähigkeit, Go zu lesen und zu verstehen\nErfahrung mit Incident-Response-Aktivitäten \nErfahrung mit Web Application Firewalls, CDN-Anbietern, z. B. Cloudflare, Akamai\nErfahrung mit GitLab CI/CD-Pipelines\n Deine Vorteile bei uns auf einen Blick: Besuche unsere Benefits-Seite.\nBewirb dich einfach online über unsere Karriereseite - wir melden uns schnellstmöglich mit einem Feedback bei dir!\nEin Ort, an dem Du Du sein kannst.\nWir sehen es als unsere Verantwortung, ein Umfeld zu schaffen, in dem sich alle so willkommen fühlen können, wie sie sind.\nUnterschiedliche Hintergründe und Perspektiven machen uns stärker und prägen unsere Kultur.\nWofür wir intern stehen, dafür stehen wir auch als Marke: Akzeptanz, Inklusion und ein fairerer Umgang mit Mode.","description_format":"text","description_chars":2733,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"German","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","E-commerce Platforms","Marketplaces"],"lifecycle":[{"event":"open","at":"2026-09-05T10:04:07Z"}],"visa":[],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":1,"p_active":0.431,"p_room":0.36,"age_days":48,"expected_fill_days":29,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:junior,brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":{"stated_usd_annual":84235,"is_top_pay":false},"html_url":"https://alion.io/job/about-you-application-security-engineer-all-genders-3","json_url":"https://alion.io/job/about-you-application-security-engineer-all-genders-3.json","meta":{"generated_at":"2026-10-24T02:08:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3493,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3531},"rest":"https://alion.io/mcp/rest/get_company?id=3531"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fabout-you-application-security-engineer-all-genders-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fabout-you-application-security-engineer-all-genders-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fabout-you-application-security-engineer-all-genders-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/about-you-application-security-engineer-all-genders-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fabout-you-application-security-engineer-all-genders-3"}]}