Application Security Engineer (m/f/d)

Ehrhardt + Partner Group Show all offers

Boppard-Buchholz, Dortmund, Hamburg, Köln

29 days ago

In short

Application Security Engineer (m/f/d) at EPG. Advise dev teams on secure design, review code, integrate security tools, perform ethical hacking. Requires AppSec/Software Security experience, understanding vulnerabilities, and code review skills. Multiple locations.

Keywords

Application Security SAST SCA CI/CD Kubernetes APIs Secure Coding Vulnerability Analysis

AI-written summary based on the listing content.

Welcome to EPG

With more than 1,600 customers, EPG is one of the world’s leading providers of a comprehensive supply chain execution suite (EPG ONE) and offers WMS, WCS, WFM, TMS, and voice solutions to optimize logistics processes. Logistics consulting, cloud services, managed services, and logistics training at its own academy round out EPG’s comprehensive range of solutions.

THE POSITION - This is what we are all about

Help us build software that is secure by design. As an Application Security Engineer (m/f/d), you work closely with our development teams to identify security risks early, improve secure coding practices, and strengthen the security of our SaaS platform. With a white-hat hacker mindset, you think like an attacker – and help our developers stay one step ahead.

THE TASKS - You make a difference

Advise development teams on secure software design, architecture and coding practices.
Review security-critical code, components and APIs to identify vulnerabilities and recommend practical solutions.
Evaluate and integrate security tools and automated security checks into our development and CI/CD processes.
Analyze potential attack vectors and validate vulnerabilities using ethical hacking and application security techniques.
Drive application security standards and continuously strengthen security awareness within our engineering teams.

THE REQUIREMENTS - What makes you successful

Practical experience in Application Security, Software Security or Secure Software Development.
Strong understanding of common application vulnerabilities, attack techniques and secure coding principles.
Experience with code reviews, security testing and vulnerability analysis.
Familiarity with security tools such as SonarQube, JFrog Xray or comparable SAST/SCA solutions.
Knowledge of cloud-native environments, APIs and modern software development processes; experience with Kubernetes and CI/CD is an advantage.

What we offer

We believe that work can be fun and fit into your life. And that’s why, in addition to our colorful and talented team, the best clients, and the most diverse projects and products, we also offer the following:

Onboarding to help you arrive. An onboarding plan in advance so you know what to expect. An onboarding day to get to know us better. And an onboarding phase in your department, designed so that you can arrive, understand, and get started in the best possible way.
Tasks to help you grow. Making an impact from day one. For us, that means giving and receiving responsibility. Not only being able to voice ideas, but being allowed to implement them. And a personal development concept that fits individually – whether you aim to become a leader or a subject matter expert.
Working hours and location? Flexible. Our flex-time model offers the flexibility that fits your work and your life. This naturally includes the option to work from your home office.
Collaboration and culture? At eye level. Open feedback. Regular updates from our management. Solution-oriented teamwork. And of course get-together events like go-karting, the EPG Christmas party, or our LAN party – to celebrate ourselves and our achievements together.
Now. For later. The company pension scheme (bAV) offers a great way to plan for retirement. We provide a strong employer contribution today so that your tomorrow can be as relaxed as possible.
Movement. To keep moving for a long time. Everyone has the opportunity to lease a JobRad. Or train in our fitness room. Prefer something as a team? Then the company run or an afternoon in the climbing forest is a great choice.
An industry of today. And tomorrow. The world of logistics not only shapes our everyday lives. It is also essential for a sustainable, livable future. What does that mean? A lot that we can move together. The opportunity to make things better. And a secure workplace that will remain relevant in the future.
And of course, we also have a fruit basket and drinks.