Germany
Siemens
REWE digital
Application Security Engineer (m/f/d)
Germany
Cologne, North Rhine-Westphalia, Germany
JavaPostgreSQLGCPKubernetesTerraform
Automatic translation. Check the original.
About the opportunity
Location: 51149 Cologne |
Contract type: Full-time/part-time, permanent |
Job ID: 961618
You can find more information at jobs.rewe-group.com jobs.rewe-group.com/.
Do you still have questions about your online application or our application process? Then check out our FAQ jobs.rewe-group.com/faq.
We expressly emphasize that all individuals are equally welcome here – regardless of gender/gender identity, ethnic origin and nationality, social background, religion/belief, physical and mental abilities, age, or sexual orientation, or other individual characteristics.
REWE digital – Your Home of IT
We are the home for everyone who thrives in the digital world. A tech team where IT and non-IT specialists from various areas work together. Together, we bring innovations to life – for retail and the everyday lives of millions of people.
Responsibilities that will advance you
- Building and continuously improving a Security Champion Program and organizing community events such as Capture the Flag
- Improving the security culture through training and coaching of software engineers, managers, and product owners with practical tasks in offensive security, as well as security by design and secure coding.
- Creating guidelines that describe concrete, practical activities and tools in the SDLC for software developers, thus making the requirements from the Information Security Management System manageable.
- Developing and improving DevSecOps security and compliance tools that integrate security into the SDLC according to Shift Left. Supporting platform teams in integrating the tools into their platforms.
- Independent, agile work within and with self-organizing teams.
- Working with a tech stack, from microservices in GCP, Terraform, Kubernetes, Kafka, Elasticsearch, PostgreSQL, via Java monoliths on VMs and SAP to the mainframe.
Features that make you stand out
- Expertise in web application security testing, cloud, and network security assessment
- Knowledge in web application security, e.g., vulnerabilities and solutions for the OWASP Top 10
- Experience in creating guidelines and architectural specifications that meet the requirements of an ISMS according to ISO27001
- You have been a Security Champion or Security Engineer in an agile product team
- Initial practical experience in building security communities and security champion programs
- You have mastered Prometheus, Grafana, Terraform, Kubernetes, Google Cloud Platform (GCP)
- DevOps mindset and interest in outcome-oriented, experimental, data-driven product development, as well as automation, CI/CD, DevOps, SDLC, DevSecOps, and microservice architectures
- Completed degree in Computer Science with a clear focus on IT Security or a corresponding completed apprenticeship. Alternatively, we are also happy to receive applications from individuals without relevant training but with many years of experience.
Benefits that make life even better
- Your life-work integration through flexible working hours, mobile working, 30 days of vacation + regional public holidays, time-off models (sabbatical, care leave, etc.), and a company kindergarten.
- More time for you – use the opportunity for up to two additional weeks of leave per year; individually planned, flexibly redeemable in agreement with your team.
- We invest in your future. With your annual training budget, you can learn in relation to your individual skill development. So stay curious and gain new input for yourself and all of us on our own learning platform, the "IT Learning Hub", at industry conferences, in technical books, or in one of the many free workshops from our Learning Canvas.
- Updates for you at in-house workshops and events, such as Hackathons and Tech Talks, as well as weekly stand-ups, regular Tech All-Hands, and Open Door formats.
- Your impact, because you develop applications and services for millions of people – with over 1 billion data records daily, on over 6 million mobile phones, 32.000 checkouts, or in 7.300 markets.
- Your relaxed commute with the subsidized Deutschlandticket, a company bike, and parking spaces right outside.
- Our networks such as DITO - different together, SHINE, f.ernetzt, WomEngineers @REWE digital, and Women's Drive make us a diverse community and support you in your personal development.
- Benefits of a corporation for you, e.g., in the form of discounts at REWE, PENNY, toom Baumarkt, and DER TOUR Group, comprehensive healthcare services, support for your retirement provision in the form of capital-forming benefits and the REWE Pension Fund, special benefits such as holiday and Christmas bonuses, and much more.
More opportunities with one profile
Want to be considered for more roles without repeating the whole process? Create your profile and be found by companies using Nort.
Create my profile
