{"id":3660505,"url":"https://alion.io/job/jenoptik-application-security-engineer-mwd","title":"Application Security Engineer (m/w/d)","company":{"id":51761,"name":"Jenoptik","domain":"jenoptik.com","url":"https://alion.io/company/jenoptik","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Monheim am Rhein, Germany"],"countries":["DE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Apache Kafka","optional":false},{"name":"API Gateway","optional":false},{"name":"ASP.NET Core","optional":false},{"name":"Azure","optional":false},{"name":"Bicep","optional":false},{"name":"Burp Suite","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"GDPR","optional":false},{"name":"GitHub","optional":false},{"name":"Grafana","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"RabbitMQ","optional":false},{"name":"React.js","optional":false},{"name":"Scrum","optional":false},{"name":"Snyk","optional":false},{"name":"SonarQube","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Vault","optional":false},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-11-03T03:15:45Z","employer_posted_date":null,"last_verified_at":"2026-11-03T03:15:45Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"Jenoptik is an international photonics group with representatives in over 80 countries. Optical technologies are the foundation of our business. We employ around 4,000 people worldwide.\nJob Description:\nWe are seeking a hands-on Security Engineer to own the security of a large, business-critical web application built on C# / .NET backends.\nThis is not only a policy or audit role. You will read and write code, find vulnerabilities, fix them, and make sure they stay fixed. You will be the go-to person for authentication, authorization, cryptography and secure API design, and you will work side by side with our developers and DevOps engineers to build security into every stage from commit to production. If you enjoy tracing a token through a request pipeline as much as you enjoy closing a finding, we want to talk to you.\nResponsibilities:\nApplication Security Ownership: Be the accountable owner for the security posture of a large .NET application, from architecture decisions down to individual endpoints.\nAuthentication & Identity: Design, implement and harden authentication and authorization flows, including OAuth 2.0, OpenID Connect, JWT issuance and validation, refresh-token handling, session management, MFA and role- and policy-based access control in ASP.NET Core.\nCryptography in Practice: Select and correctly apply cryptographic primitives (hashing, symmetric and asymmetric encryption, signing, key derivation), manage keys, secrets and certificates, and eliminate weak or misused crypto in the codebase.\nFind & Fix: Perform code reviews, threat modeling and hands-on vulnerability testing; reproduce issues, write the fix in C#, and add tests that prevent regressions.\nDevSecOps Collaboration: Work with the DevOps team to embed security into CI/CD pipelines: SAST, DAST, dependency and container scanning, secret detection and secure build and release gates.\nVulnerability Management: Triage findings from scanners, pentests and bug reports; prioritize by real risk and drive them to closure with the responsible teams.\nSecure API Design: Define and enforce standards for input validation, output encoding, rate limiting, CORS, security headers and safe error handling across our services.\nIncident Response: Investigate security incidents, analyze logs and traces, contain issues and lead post-mortems with concrete follow-up actions.\nEnablement: Write secure-coding guidelines, reusable libraries and examples; coach developers so that the secure way is also the easy way.\nQualifications & Requirements:\nEducation: At minimum a bachelor's degree in Computer Science, IT Security or a related field.\nBackend Expertise: Proven, hands-on experience building and maintaining C# / .NET (ASP.NET Core) backends in production.\nIdentity & Access: Deep practical knowledge of OAuth 2.0, OpenID Connect, JWT (claims, signing algorithms, validation pitfalls), cookies vs. tokens, and authorization models (RBAC, ABAC, policy-based).\nApplied Cryptography: Solid understanding of TLS, hashing (incl. password hashing such as bcrypt, scrypt, Argon2, PBKDF2), symmetric and asymmetric encryption, digital signatures, certificates and secure key storage.\nWeb Security: Strong command of the OWASP Top 10 and OWASP API Security Top 10, and experience exploiting and fixing issues such as injection, XSS, CSRF, SSRF, IDOR and broken access control.\nSecurity Tooling: Hands-on experience with SAST/DAST and dependency scanning tools (e.g. SonarQube, Snyk, OWASP ZAP, Burp Suite, GitHub Advanced Security or similar).\nCI/CD & Containers: Working knowledge of CI/CD pipelines and Docker, enough to collaborate effectively with DevOps on secure pipelines and images.\nScripting: Comfortable automating tasks with PowerShell, Python or Bash.\nSoft Skills: Ownership mentality, pragmatic risk judgment, and the ability to explain security issues clearly to developers and stakeholders without slowing delivery unnecessarily.\nCertifications (Optional, Most Welcome)\nCertifications are not required, but entry-level security and Azure credentials are a strong plus.\nSecurity\nCompTIA Security+\nISC2 Certified in Cybersecurity (CC)\nMicrosoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)\nFurther practical credentials (e.g. eJPT, CompTIA PenTest+) are a bonus\nMicrosoft Azure\nMicrosoft Certified: Azure Fundamentals (AZ-900)\nMicrosoft Certified: Azure Developer Associate (AZ-204)\nMicrosoft Certified: Azure Security Engineer Associate (AZ-500) (a strong plus)\nOptional But Welcome Skills\nMicrosoft Azure: Experience with Entra ID (Azure AD), Key Vault, Managed Identities, App Service, Defender for Cloud and network security in Azure.\nReact / Frontend Security: Understanding of how React applications work, including client-side token storage, CSP, XSS risks in SPAs and secure frontend-to-API communication.\nObservability for Security: Experience with logging and monitoring tools such as Application Insights, Microsoft Sentinel, Grafana or ELK to detect and investigate suspicious activity.\nInfrastructure as Code: Familiarity with Terraform or Bicep and reviewing IaC for misconfigurations.\nCompliance Awareness: Basic knowledge of GDPR (DSGVO) and standards such as ISO 27001.\nAgile Mindset: Comfort working in an Agile/Scrum environment.\nQualifications & Requirements:\nEducation:\nBachelor's degree in Computer Science, Cybersecurity, Software Engineering, or a related field required (as the baseline requirement)\nMaster's degree in Computer Science, Cybersecurity, or Information Technology strongly recommended\nWork Experience: 7+ years of experience in Cloud Architecture, Cybersecurity, and/or DevSecOps roles\nExecution & Drive: Self-motivated, hands-on practitioner with a \"doer\" mentality, taking strong personal ownership and pride in the quality, security, and elegance of technical deliverables\nTechnical Leadership: Proven ability to lead, mentor, and inspire engineering teams to continuously raise the bar and strive for excellence\nPublic Internet Exposure: Hands-on experience defending public-facing, internet-exposed applications against threats (e.g., volumetric DDoS, credential stuffing, API abuse, SQLi)\nAzure Technical Stack: Strong practical knowledge of Microsoft Azure services and security tools (Defender for Cloud, Microsoft Entra ID, Azure Key Vault, Azure Policy, Network Security Groups, Private Endpoints)\nDevOps Architecture & Infrastructure as Code (IaC): Experience in driving automated infrastructure provisioning, continuous deployment, and telemetry across hybrid Azure, on-premises, and Kubernetes environments, ensuring zero-downtime deployments, high availability, and operational resilience\nSoftware & Distributed Architecture Expertise: Strong background in software architecture with proven experience designing and securing microservices architectures. Solid understanding of distributed systems, event-driven messaging systems (e.g., RabbitMQ, Kafka, Azure Service Bus), data persistence patterns, and API gateway integrations\nCertifications (Associate & Expert level welcome)\nMicrosoft Azure Associate Certifications (Preferred/Targeted): Azure Security Engineer Associate (AZ-500), Azure Administrator Associate (AZ-104), Azure Developer Associate (AZ-204), Azure Network Engineer Associate (AZ-700)\nExpert / Industry Certifications (A plus): Microsoft Certified: Cybersecurity Architect Expert (SC-100), Microsoft Certified: Azure Solutions Architect Expert (AZ-305), Certified Kubernetes Security Specialist (CKS) or CISSP","description_format":"text","description_chars":7500,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Precision Engineering","Optics & Photonic Components"],"lifecycle":[{"event":"open","at":"2026-11-03T03:15:45Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":22,"reasons":["seen:1","velocity","win:early","comp:junior"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/jenoptik-application-security-engineer-mwd","json_url":"https://alion.io/job/jenoptik-application-security-engineer-mwd.json","meta":{"generated_at":"2026-11-04T15:36:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23877,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":51761},"rest":"https://alion.io/mcp/rest/get_company?id=51761"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjenoptik-application-security-engineer-mwd"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjenoptik-application-security-engineer-mwd"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjenoptik-application-security-engineer-mwd"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/jenoptik-application-security-engineer-mwd\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjenoptik-application-security-engineer-mwd"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3660505}},{"tool":"search_jobs","arguments":{"company":"jenoptik.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3660505},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}