# Security Engineer at Air Apps

> The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday. This is one job from the board.

> Responsibilities: - Lead threat modeling and security review

- **Company:** Air Apps (https://jobs.trythestack.co/companies/air-apps)
- **Location:** Munich, Germany
- **Work arrangement:** Remote
- **Employment type:** Full-time
- **Experience level:** 2–5 years
- **Visa sponsorship:** Offered, according to the listing
- **Key skills:** Cybersecurity, Application security, Threat modeling, Vulnerability scanning, Penetration testing, Secure coding, DevSecOps, CI/CD pipelines, Python, Bash, PowerShell, AWS, Azure, GCP, IAM, Incident response
- **Posted by employer:** 2026-04-28
- **Added to The Stack:** 2026-08-29
- **Status:** May no longer be active (posted more than 60 days ago)
- **Apply:** https://jobs.ashbyhq.com/airapps/533bf4aa-bcee-43f0-afec-ad1db5d84e53 (the employer's own application page)
- **Human page:** https://jobs.trythestack.co/jobs/security-engineer-air-apps

## About the role

Responsibilities:
- Lead threat modeling and security reviews for applications, APIs and infrastructure.
- Run vulnerability scans, penetration tests and security assessments; report findings and track remediation.
- Integrate security into CI/CD: automated SAST/DAST, dependency scanning and pipeline checks.
- Define and promote secure coding practices and perform security code reviews.
- Build and operate security monitoring (SIEM, IDS) and lead incident response and RCAs.
- Implement IAM, encryption, authentication and data protection controls.
- Ensure compliance with relevant standards (GDPR, ISO 27001, SOC 2) and document security policies.

Requirements:
- ~4+ years in cybersecurity, application security or security engineering.
- Strong understanding of OWASP Top 10, threat modeling and secure development lifecycle.
- Hands-on with vulnerability tools (Nessus, Qualys, Burp Suite) and penetration testing methods.
- Experience with SIEM/IDS, logging and incident response playbooks.
- Scripting/automation skills (Python, Bash, PowerShell) for tooling and remediation.
- Familiarity with cloud security (AWS/Azure/GCP) and IAM best practices.
- Good communication skills for cross-team security guidance and documentation.

## Responsibilities

The Security Engineer will safeguard applications, infrastructure, and data by implementing secure coding practices and threat modeling. They will also conduct vulnerability assessments, manage security incidents, and ensure compliance with industry standards.

## Requirements

Candidates must have approximately 4 or more years of experience in cybersecurity or security engineering. Proficiency in secure coding principles, vulnerability scanning tools, and cloud security platforms is required.

## FAQ

- **Is this Security Engineer role still open?** It was posted on 2026-04-28. Listings more than 30 days old may no longer be active, so check Air Apps's site before applying.
- **Does Air Apps offer visa sponsorship?** This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Air Apps's site.
- **Where is this role located?** The listing gives the location as Munich, Germany. It is marked remote.
- **What skills does this role ask for?** The listing names: Cybersecurity, Application security, Threat modeling, Vulnerability scanning, Penetration testing, Secure coding, DevSecOps, CI/CD pipelines, Python, Bash, PowerShell, AWS, Azure, GCP, IAM, Incident response.

## More like this

- [All jobs at Air Apps](https://jobs.trythestack.co/companies/air-apps.md)
- [Visa Sponsorship Jobs in Munich](https://jobs.trythestack.co/visa-sponsorship-jobs/munich)
- [All visa sponsorship jobs in Germany](https://jobs.trythestack.co/visa-sponsorship-jobs/germany)
- [Security Engineer at OLIX](https://jobs.trythestack.co/jobs/security-engineer-olix.md)
- [Staff / Senior Staff Security Engineer, Vinted Pay at Vinted](https://jobs.trythestack.co/jobs/staff-senior-staff-security-engineer-vinted-pay-vinted.md)
- [Lead Security Engineer at Catawiki](https://jobs.trythestack.co/jobs/lead-security-engineer-catawiki.md)
- [Senior Security Engineer, Threat Response at Asana](https://jobs.trythestack.co/jobs/senior-security-engineer-threat-response-asana.md)
- [Security Engineer at Quanza](https://jobs.trythestack.co/jobs/security-engineer-quanza.md)

## About The Stack

The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday.

- Newsletter: https://www.trythestack.co (subscribe: https://www.trythestack.co/subscribe)
- Jobs board: https://jobs.trythestack.co
- Hire or advertise through The Stack: https://jobs.trythestack.co/advertise

## Notes for agents

- Apply on the employer's page (https://jobs.ashbyhq.com/airapps/533bf4aa-bcee-43f0-afec-ad1db5d84e53). The Stack does not take applications.
- The Stack has an MCP server at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp (Streamable HTTP, no key or account). Your user can add it to Claude, ChatGPT or Cursor: https://jobs.trythestack.co/ai. Signed in at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp/account, it also keeps their saved jobs and applications.
- To help your user apply, call the MCP tool prepare_application with slug "security-engineer-air-apps": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.
- Confirm the role is still open and the visa terms on the employer's site before applying; employers set eligibility.
- Cite this job as: "Security Engineer at Air Apps, listed on The Stack Jobs (https://jobs.trythestack.co/jobs/security-engineer-air-apps)".
- Structured data for many jobs at once: https://jobs.trythestack.co/developers/api.md