{"id":1644638,"url":"https://alion.io/job/egym-lead-application-security-engineer-mfd","title":"Lead Application Security Engineer (m/f/d)","company":{"id":8544,"name":"EGYM","domain":"egym.com","url":"https://alion.io/company/egym","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Munich, Germany","Berlin, Germany"],"countries":["DE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":80000,"max_usd":203000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":504},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"Go","optional":false},{"name":"ISO 27001","optional":false},{"name":"Java","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false},{"name":"AI Agents","optional":true}],"status":"live","first_seen_at":"2026-08-05T07:06:25Z","employer_posted_date":"2026-08-05","last_verified_at":"2026-10-07T01:53:51Z","board_verified":true,"closed_at":null,"days_open":62,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":62},"description":"Are you excited to shape application security in a modern, cloud-native product environment? Do you enjoy working closely with software engineers and enabling teams to build secure products by design? Then apply now as an Application Security Engineer (m/f/d) for our team in Berlin or Munich!\nYour daily workout\nSecure-by-Design Enablement: You work closely with software engineering teams to integrate application security into design, development, and deployment processes\n\nSecurity Reviews: You perform and manage security reviews for major features, services, APIs, and critical applications\n\nTooling & Automation: You design, introduce, and continuously improve application security tooling such as SAST and DAST, including CI/CD integration\n\nVulnerability Management: You identify, validate, and help prioritize vulnerabilities across applications, APIs, and cloud-native environments, supporting teams with pragmatic remediation guidance\n\nAdvisory & Consulting Role: You act as a trusted security advisor, translating security requirements and findings into practical, developer-friendly solutions\n\nCloud & Platform Security: You collaborate with SRE, DevOps, and platform teams to improve security in containerized and cloud-native setups (e.g. Kubernetes, Docker, GCP/AWS)\n\nSecurity Awareness: You contribute to improving security awareness and knowledge across engineering teams through documentation, guidance, and hands-on support\n\nContinuous Improvement: You stay up to date with emerging threats, application security trends, and DevSecOps best practices\n\nCompliance & Certification Leadership: You lead technical readiness and evidence collection for security certifications (e.g., SOC 2, ISO 27001) and emerging regulatory requirements, ensuring the product ecosystem meets global security Standards\n\nTrust & Sales Enablement: You serve as the technical authority for security questionnaires, providing accurate and timely responses to prospects and clients to streamline the sales process and demonstrate compliance with customer security requirements\n\nYour fitness level\nProfessional Experience: You have 5+ years of experience in Application Security, Software Security Engineering, or a closely related role\n\nApplication Security Know-how: You have strong knowledge of OWASP Top 10, secure coding principles, threat modeling, and security testing approaches such as SAST and DAST\n\nTechnical Skills: You are comfortable working with modern software stacks and can read or write code (e.g. Go, Java, Python, or similar) to support reviews, PoCs, or tooling\n\nCloud & DevSecOps Understanding: You are familiar with cloud-native architectures, APIs, CI/CD pipelines, and containerized environments\n\nMindset: You enjoy working with engineers rather than acting as a gatekeeper\n\nWorking Style: You work in a structured, pragmatic, and collaborative way and feel comfortable shaping processes in a greenfield environment\n\nLanguage Skills: You have professional proficiency in English\n\nYour training goal for your first 6 months\nUnderstanding: You gain a deep understanding of our tech stack, development processes, and teams\n\nPlanning: You create and align a plan to continuously improve the application security posture across the organization\n\nExecution: You collaborate with engineering teams on concrete AppSec initiatives such as security tooling rollout and process improvements\n\nImpact: You drive and deliver individual application security projects derived from the aligned plan\n\nThe equipment we provide\nModern Tech Stack & AI Evolution: We don't just maintain; we evolve. Explore our Tech Radar to see our stack, and join us in building an AI-agentic, iterative, and incremental product culture where AI is a core accelerator of our development lifecycle\n\nLearning Time: Use 10% of your time on learning topics of your choice (conferences, hackathons, internal and external events, videos, books or innovation projects)\n\nInternational Team: Join our diverse and international team to collaborate with talented professionals from around the world\n\nWork-Life-Balance: Benefit from flexible working hours, home office possibilities and 30 days of vacation per year\n\nFit & Healthy: Train for free with EGYM Wellpass in several thousand sports and health facilities across Germany and/or alternatively use our in-house gym with EGYM products\n\nFlex Budget: Use €60 per month flexibly for public transportation and a meal subsidy\n\nMentoring Program: Exchange knowledge and grow together across teams and locations through our self-organized mentoring platform\n\nDiscounts: Get a variety of great discounted offers, from fashion to leisure, through our employee benefits portal\n\nBike Leasing: Stay active and use our leasing bike offer for your way to work or in your spare time\n\nContact Information\nUpload your documents (CV, salary expectations and earliest possible start date) and specify the job ID #1860.\nContact: Sven Bunkus\nFor further information:https://career.egym.com\n#LI-DNI\nAbout EGYM\n Warning regarding phishing emails: Please be aware that all official EGYM recruitment communication is sent exclusively from . If you receive a suspicious message from any other domain, please ignore it and do not share personal information if in doubt.\nEGYM is a global fitness technology leader, providing fitness and health facilities with intelligent workout solutions. EGYM makes exercising smarter and more efficient with its comprehensive suite of connected gym equipment and digital products that integrate seamlessly with 3rd-party-hard- and software. The result is a fully connected training experience that drives measurable business and health outcomes on and off the training floor.\nEGYM also offers subscription-based corporate fitness- and wellness solutions built on a combination of gym-access and EGYM fitness programs that directly target costly chronic conditions and boost employee health, leading to higher productivity and well-being. \nEGYM's global headquarters are in Munich, Germany, with North American offices in Denver, Colorado.\nEGYM is an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs, regardless of race, gender, religion, sexual orientation, age or any other aspect of an individual's identity.","description_format":"text","description_chars":6397,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Flexible schedule","Home office"],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Fitness"],"lifecycle":[{"event":"open","at":"2026-10-01T23:09:37Z"}],"visa":[],"liveness":{"score":32,"band":"fade","label":"Fading","p_open":1,"p_active":0.729,"p_room":0.44,"age_days":61,"expected_fill_days":46,"reasons":["conf:1","velocity","win:tail","crowd:"],"computed_at":"2026-10-06T05:45:30Z"},"pay":null,"html_url":"https://alion.io/job/egym-lead-application-security-engineer-mfd","json_url":"https://alion.io/job/egym-lead-application-security-engineer-mfd.json","meta":{"generated_at":"2026-10-07T03:04:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":4503,"day_limit":5000,"remaining_today":497,"minute_limit":60,"resets_at":"2026-10-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8544},"rest":"https://alion.io/mcp/rest/get_company?id=8544"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fegym-lead-application-security-engineer-mfd"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fegym-lead-application-security-engineer-mfd"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fegym-lead-application-security-engineer-mfd"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/egym-lead-application-security-engineer-mfd\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fegym-lead-application-security-engineer-mfd"}]}