Security Engineer at Air Apps

✨ The Stack take on this Air Apps job

• 🏢 Air Apps has 73 jobs here, 73 with visa sponsorship see all
• 🛂 Visa: EU Blue Card. Minimum salary: €50,700 a year guide
• 💡 No salary shown. Ask Air Apps if it is above the minimum.

Updated 2026-11-05, from our data and official sources.

Apply with your AI assistant

With The Stack connected to Claude, ChatGPT or Cursor, paste this. Your assistant tailors your CV and cover letter, checks the visa facts and gives you the apply link.

Help me apply to this job on The Stack: https://jobs.trythestack.co/jobs/security-engineer-air-apps

Not connected yet? Connect in a minute. To help your user apply, call the MCP tool prepare_application with slug "security-engineer-air-apps": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.

About the role

Responsibilities:
- Lead threat modeling and security reviews for applications, APIs and infrastructure.
- Run vulnerability scans, penetration tests and security assessments; report findings and track remediation.
- Integrate security into CI/CD: automated SAST/DAST, dependency scanning and pipeline checks.
- Define and promote secure coding practices and perform security code reviews.
- Build and operate security monitoring (SIEM, IDS) and lead incident response and RCAs.
- Implement IAM, encryption, authentication and data protection controls.
- Ensure compliance with relevant standards (GDPR, ISO 27001, SOC 2) and document security policies.

Requirements:
- ~4+ years in cybersecurity, application security or security engineering.
- Strong understanding of OWASP Top 10, threat modeling and secure development lifecycle.
- Hands-on with vulnerability tools (Nessus, Qualys, Burp Suite) and penetration testing methods.
- Experience with SIEM/IDS, logging and incident response playbooks.
- Scripting/automation skills (Python, Bash, PowerShell) for tooling and remediation.
- Familiarity with cloud security (AWS/Azure/GCP) and IAM best practices.
- Good communication skills for cross-team security guidance and documentation.

Responsibilities

The Security Engineer will safeguard applications, infrastructure, and data by implementing secure coding practices and threat modeling. They will also conduct vulnerability assessments, manage security incidents, and ensure compliance with industry standards.

Requirements

Candidates must have approximately 4 or more years of experience in cybersecurity or security engineering. Proficiency in secure coding principles, vulnerability scanning tools, and cloud security platforms is required.

Key skills

• Cybersecurity — in 20 other listings on The Stack
• Application security — in 25 other listings on The Stack
• Threat modeling — in 32 other listings on The Stack
• Vulnerability scanning — in 13 other listings on The Stack
• Penetration testing — in 25 other listings on The Stack
• Secure coding — in 13 other listings on The Stack
• DevSecOps — in 24 other listings on The Stack
• CI/CD pipelines — in 53 other listings on The Stack
• Python
• Bash
• PowerShell
• AWS
• Azure
• GCP
• IAM
• Incident response

On The Stack (as of 2026-11-05)

• Air Apps has 72 other listings on The Stack, 72 of them marked as offering visa sponsorship.
• 166 visa-sponsored jobs in Germany on The Stack, posted in the last 60 days.
• 43 visa-sponsored security engineer jobs in Europe on The Stack, posted in the last 60 days.

Frequently asked questions about Air Apps

Is this Security Engineer role still open?

It was posted on 2026-04-28. Listings more than 30 days old may no longer be active, so check Air Apps's site before applying.

Does Air Apps offer visa sponsorship?

This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Air Apps's site.

Where is this role located?

The listing gives the location as Munich, Germany. It is marked remote.

What skills does this role ask for?

The listing names: Cybersecurity, Application security, Threat modeling, Vulnerability scanning, Penetration testing, Secure coding, DevSecOps, CI/CD pipelines, Python, Bash, PowerShell, AWS, Azure, GCP, IAM, Incident response.