{"id":1856664,"url":"https://alion.io/job/telio-application-security-engineer","title":"Application Security Engineer","company":{"id":2528172,"name":"Telio","domain":"tel.io","url":"https://alion.io/company/tel-io","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Personio","truth_index":{"grade":"B","score":75,"open_postings":4,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-05T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hamburg, Germany"],"countries":["DE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":87000,"max_usd":160000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":21},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"OWASP","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Agile","optional":true},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"C#","optional":true},{"name":"JavaScript","optional":true},{"name":"Python","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-09-24T17:13:17Z","employer_posted_date":"2026-09-24","last_verified_at":"2026-10-06T00:58:31Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"Your mission\nAs our Application Security Engineer, you will play a key role in shaping and strengthening the security of our products and platforms. Working closely with highly skilled engineering, platform, and security teams, you will help build secure, resilient, and trusted software while driving a security-first culture across the organization. This is an opportunity to make a measurable impact on modern products, influence security strategy, and continuously develop your expertise in a collaborative and innovative environment.\nDrive product security across the entire software development lifecycle (SDLC).\nPerform threat modeling, architecture reviews, and security assessments for applications, APIs, and distributed systems.\nIdentify, assess, prioritize, and support the remediation of security vulnerabilities.\nIntegrate, operate, and continuously improve security tooling within CI/CD pipelines, including SAST, DAST, SCA, dependency scanning, and secrets-scanning solutions.\nDefine, promote, and support secure coding standards and security best practices across engineering teams.\nReview and advise on authentication, authorization, identity management, secrets management, and service-to-service communication designs.\nSupport penetration testing activities, conduct targeted security testing, and drive remediation efforts.\nContribute to security policies, standards, and security awareness initiatives.\nPartner closely with software engineers, architects, and platform teams to embed security into development processes and strengthen our DevSecOps culture.\nYour profile\n5+ years of experience in Product Security, Application Security, Software Security, Secure Software Development, or a related field.\nStrong understanding of secure software development practices and common application security vulnerabilities.\nProven experience performing threat modeling, architecture reviews, code reviews, and application security assessments.\nHands-on experience with SAST, DAST, SCA, dependency-scanning, and secrets-scanning tools.\nStrong knowledge of application security, API security, and distributed-system security.\nExperience securing authentication, authorization, and identity-related workflows.\nSolid understanding of OWASP, CWE, security testing methodologies, and modern security engineering practices.\nExperience working with CI/CD pipelines and applying DevSecOps principles.\nAbility to collaborate effectively with software engineering, platform, and DevOps teams.\nFluent English skills are required; German language skills are a plus.\nNice to haveDevelopment experience in C#, .NET, JavaScript/TypeScript, Python, or similar programming languages.\nExperience securing cloud-native applications and services in Azure and/or AWS environments.\nRelevant security certifications such as OSCP, CSSLP, OSWE, or GIAC Secure Development certifications.\nExperience working in agile software development environments.\nWhy us?\nModernes, zentral gelegenes Büro: Nur 5 Gehminuten von der Haltestelle Bahrenfeld entfernt - bequeme Anreise garantiert!Offene Unternehmenskultur: Tauche ein in ein internationales Arbeitsumfeld, in dem Ideen und Vielfalt gefördert werden.\nKollegiale Arbeitsatmosphäre: Genieße eine Arbeitsatmosphäre, die von Zusammenarbeit und Hands-on-Mentalität geprägt ist.\nHybrides Arbeitsmodell: Flexibilität - Kombiniere Arbeit vor Ort und im Home Office.\n30 Tage Urlaub: Mehr Zeit für Erholung und Freizeit. Zusätzliche freie Tage am 24.12., 31.12. sowie einen halben Tag an deinem Geburtstag.\nAttraktives Vergütungspaket: Wir honorieren deine Leistung angemessen.\nBetriebliche Altersvorsorge: Mit großzügigem 25% Arbeitgeber-Zuschuss bis zu 75 €.\nPluxee-Gutscheine: Für unbeschwerte Verpflegung während der Arbeit.\nHVV-Abo- oder Tiefgaragenstellplatz-Zuschuss: Unterstützung für Deine bequeme\nJobRad: Nutze die Möglichkeit, nach der Probezeit ein JobRad zu leasen.\nEGYM Wellpass: Nutze die Möglichkeit, nach der Probezeit dich körperlich und mental fit zu halten.","description_format":"text","description_chars":4003,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"German","level":"All levels","optional":false},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Home office"],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Nonprofits & Foundations"],"lifecycle":[{"event":"open","at":"2026-10-04T20:21:38Z"}],"visa":[],"liveness":{"score":69,"band":"ok","label":"Likely open","p_open":1,"p_active":0.766,"p_room":0.9,"age_days":10,"expected_fill_days":23,"reasons":["conf:2","win:mid"],"computed_at":"2026-10-05T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/telio-application-security-engineer","json_url":"https://alion.io/job/telio-application-security-engineer.json","meta":{"generated_at":"2026-10-06T01:41:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":2421,"day_limit":5000,"remaining_today":2579,"minute_limit":60,"resets_at":"2026-10-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2528172},"rest":"https://alion.io/mcp/rest/get_company?id=2528172"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftelio-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftelio-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftelio-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/telio-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftelio-application-security-engineer"}]}