Application Security Engineer (f/m/d)

Awin · Berlin, Berlinsenior

En corto

▸Líder de seguridad aplicada en equipo de producto y tecnología, integrando seguridad en el ciclo de vida del desarrollo.
▸Responsable de formación, modelos de amenazas, revisiones de código y gestión de vulnerabilidades, con foco en AI/LLM y DevSecOps.
▸Destaca la responsabilidad de crear un programa de seguridad con énfasis en cultura, educación y automatización.

Good working proficiency in spoken and written English.

En ~1 minuto te damos: quién te entrevista, las preguntas probables con respuestas desde tu CV, y tu CV adaptado a esta vacante. Gratis, sin tarjeta.

🎧¿Llegás a la entrevista? Llevá el copiloto. Nuestra extensión escucha la entrevista en vivo y te muestra anclas de 3-4 palabras desde tu CV y tu preparación — mirás, conectás, hablás. Gratis. Ver la extensión →

¿Qué piden?

✓Más de 5 años en seguridad de aplicaciones o roles técnicos relacionados.
✓Experiencia directa con ingenieros y managers de producto en seguridad de aplicaciones web.
✓Habilidades comunes en inglés hablado y escrito.
✓Capacidad para liderar formación, talleres y programas de seguridad.
✓Conocimiento práctico en JS, PHP, Python y entornos cloud (AWS, contenedores, Terraform).
✓Experiencia con herramientas SAST, DAST, SCA y gestión de vulnerabilidades.

¿No cumplís todo? Es lo normal — tu dossier gratis te dice qué gaps tenés y cómo cubrirlos en la entrevista.

SASTDASTSCACI/CD pipelinesIDEsAWSContainersTerraformAI/MLLLM

¿A quién escribirle en Awin?

Tu dossier gratis identifica a las personas que te entrevistarían — con su background, qué valoran y cómo escribirles para destacar antes de aplicar.

Purpose of Position Your role is to establish and lead an AppSec program within the Product and Technology department, acting as an evangelist for AppSec, trusted by engineers and managers alike. As a member of the core security team, you will engage in assessing application design proposals, to identify improvements to enable our engineers to create secure products. You will own the existing training program, redesign it to better equip engineers with the knowledge needed to develop secure applications, and create a Security Champions program to scale and embed a DevSecOps mindset across P&T. What you'll be responsible for • Secure the SDLC : Integrate security tooling (e.g. SAST, DAST, dependency scanning) into CI/CD pipelines and IDEs. Automate and optimise checks so teams can identify and fix issues early and efficiently. • Threat modelling & secure design : Collaborate with product and engineering teams during the design phase to conduct threat modelling sessions and pre-implementation security reviews. • Code & architecture reviews : Guide developers on secure coding practices, perform targeted code reviews, and help resolve vulnerabilities with actionable remediation support. • Vulnerability lifecycle management : • Identify, triage, track and report on vulnerabilities across internal and external apps and systems. • Collaborate with engineers to close gaps efficiently. • Support the bug bounty process with finding validation. • Present vulnerability management reports to our heads of department. • AI/ML & LLM security : • Provide guidance on secure development of AI/LLM-powered features. • Help teams manage risks such as prompt injection, model misuse, and data leakage. • Lead threat modelling exercises for AI components and advise on secure integration patterns. • Incident response collaboration : Support investigation and root cause analysis of application-layer incidents. Contribute to post-incident reviews and longer-term mitigation strategies. • Security culture & enablement : • Act as a security champion for development teams. • Be an enthusiastic and vocal advocate for application security across all engineering and product teams. • Nurture and report on our application security training program for our code contributors. • Deliver workshops and technical deep-dives on secure development practices. • Contribute to playbooks, documentation, and internal standards. • Research & innovation : • Stay ahead of industry threats and attack trends. Propose and test innovative ideas to reduce risk across our software supply chain and platforms. • Showcase how to use AI and AI-powered tools to enhance productivity and improve our security posture. Your skills • 5+ years in application security, product security or related technical roles. • Experience working directly with software engineer and product managers to secure web applications. • Experience in working within an Agile environment. • Good working proficiency in spoken and written English. • Excellent interpersonal skills and ability to clearly communicate at every level of the organisation. • Mentorship and training skills. • Ability to work across two different departments with multiple touch points. • Coding proficiency in languages such as JS, PHP, Python. • Experience with Cloud Native environments (AWS), Containers and Terraform. • Hands on experience with DAST, SAST, SCA tools, reporting and dashboarding p

No apliques sin prepararte

Investigamos quién te entrevista, adaptamos tu CV y te ensayamos en vivo — gratis la primera.