Security Engineer at Air Apps
Germany
Posted
on-site · full_time · Visa sponsorship
Apply for this role at Air Apps
Responsibilities:
- Conduct threat modeling across products and infrastructure; drive prioritized remediation.
- Perform vulnerability scanning and penetration testing; validate fixes and track risk reduction.
- Create and enforce secure coding standards; mentor developers on secure design and reviews.
- Integrate security into CI/CD pipelines and automate testing/alerts.
- Monitor security events, lead incident response, and perform root-cause analysis.
- Design and manage IAM, encryption, and authentication controls.
- Review APIs and third-party services for security exposures and recommend mitigations.
- Produce security documentation, run drills, and support compliance efforts.
Requirements:
- ~4+ years in security engineering, application security, or related cybersecurity roles.
- Strong working knowledge of OWASP Top 10, threat modeling and secure development practices.
- Experience with scanning/pen-testing tools (Nessus, Qualys, Burp Suite) and methodologies.
- Hands-on with SIEM/IDS and monitoring platforms for detection and response.
- Scripting ability (Python, Bash, PowerShell) for automation and integration.
- Familiarity with cloud platforms (AWS/Azure/GCP), IAM and encryption best practices.
- Experience in DevSecOps, embedding security into CI/CD and supporting compliance requirements.