Germany
HENSOLDT
ABOUT YOU SE & Co. KG
Junior Application Security Engineer (all genders)
Germany
Hamburg, Germany
JavaScriptPythonAWSGCPKubernetesPHPGo
Automatic translation. Check the original.
Company Description
ABOUT YOU is one of the fastest-growing e-commerce companies in Europe. With locations in Hamburg and Berlin, we bring fashion and technology together. Our mission is to rethink online shopping and make it more personal. This requires more than just good ideas; it requires people who show initiative and challenge the status quo. We rely on flat hierarchies, direct communication, and pragmatic decisions. There are no long coordination processes here. We work with dedication while also making sure to enjoy our time together, whether at team lunches, after-work drinks, company events, or a quick coffee between meetings.
Job Description
We are looking for a Junior Application Security Engineer (all genders) to strengthen our Application Security team within the IT Security unit, which is dedicated to protecting our online shop, our corporate systems, and our customers.
In this role, you will proactively target internal systems (pentesting/ethical hacking) as well as plan and implement security measures to protect our infrastructure, applications, and data. You will work closely with other security engineers, developers, and IT teams to ensure security best practices, automate security processes, and respond to new threats. The position includes the following tasks:
A place where you can be yourself.
We see it as our responsibility to create an environment where everyone can feel as welcome as they are.
Different backgrounds and perspectives make us stronger and shape our culture.
What we stand for internally, we also stand for as a brand: acceptance, inclusion, and a fairer approach to fashion.
- Conducting regular penetration tests and code reviews
- Consulting on the setup and maintenance of applications and infrastructure (typically hosted in AWS/Kubernetes)
- Triage and remediation/tracking of monitoring events
- Optimization and automation of security testing processes. This may also include building attack infrastructure, writing Python scripts, and implementing security scans in GitLab CI
- Contributing to incident response activities in the SOC, including occasional 24/7 on-call duty
Qualifications
- At least one year of experience in application security
- Ability to perform active application security assessments and penetration tests
Nice to have
- Development and scripting in Python (required; PHP, JavaScript or Go preferred)
- Architecting secure systems using threat modeling and security engineering practices
- Conducting secure code reviews across various cloud environments (AWS/GCP preferred; Azure is a plus)
- Conducting red teaming operations and offensive security strategies
- Certifications: e.g., OSCP, OSWP, etc.
- Knowledge of Laravel / PHP
- Ability to read and understand JavaScript
- Ability to read and understand Go
- Experience with incident response activities
- Experience with Web Application Firewalls (WAF) and CDN providers (e.g., Cloudflare, Akamai)
- Experience with GitLab CI/CD pipelines
Additional Information
Your benefits at a glance: Visit our benefits page.
Simply apply online via our career page - we will get back to you with feedback as soon as possible!
Compensation: EUR 50000 - EUR 62000 - annually
More opportunities with one profile
Want to be considered for more roles without repeating the whole process? Create your profile and be found by companies using Nort.
Create my profile