Application Security Engineer

Application Security Engineer

Munich, Germany — Hybrid

Developer Software | CyberSecurity | Application Security | Product Security | DevSecOps

Our client, a growing Developer Software company based in Munich , is looking for an Application Security Engineer to strengthen security across modern applications, APIs, and software development workflows.

You'll work at the intersection of CyberSecurity and Software Engineering , identifying vulnerabilities, improving secure development practices, and building automated security controls that help engineering teams deliver reliable, secure software.

Core Skills

• 3+ years in Application Security, Product Security, Software Security, or a similar role

• Application and API Security

• Threat Modelling

• SAST / DAST

• Python or similar scripting experience

• OAuth 2.0 / OpenID Connect

• CI/CD security integration

• Secure software development practices

• OWASP Top 10 and common application vulnerabilities

• Experience working directly with software engineering teams

Nice to Have

Burp Suite / OWASP ZAP

Semgrep / SonarQube / Checkmarx

Snyk / Dependabot

Software Composition Analysis (SCA)

GitHub Actions / GitLab CI

Docker / Kubernetes

AWS / Azure

API penetration testing

JWT / session security

Software supply-chain security

SBOM / dependency security

Infrastructure as Code security

DevSecOps practices

Experience securing SaaS or developer-facing products