- Application Security
Application Security Engineer (m/f/d)
- Secure by Design
- Ethical Hacking
EPG is one of the leading international providers of a comprehensive supply chain execution suite (EPG ONE™) and offers you excellent development prospects.
- Contribute ideas. And implement them.
- The industry of the present. And the future.
Teamwork has been a top priority for us right from the start. We work together internationally at several locations with more than 1,000 employees.
- Onboarding to arrive.
- Tasks to get ahead.
We offer flexible working hours, a fitness room with a range of courses, regular employee events and a company kindergarten at the company headquarters in Boppard.
- Working hours and location? Flexible.
- Together and culture? On an equal footing.
-
Application process
Application submission - 1. interview- 2. interview- Starting work
-
E-mail contact
|
THE POSITION - This is what we are all about
Help us build software that is secure by design. As an Application Security Engineer (m/f/d), you work closely with our development teams to identify security risks early, improve secure coding practices, and strengthen the security of our SaaS platform. With a white-hat hacker mindset, you think like an attacker – and help our developers stay one step ahead.
THE TASKS - You make a difference
- Advise development teams on secure software design, architecture and coding practices.
- Review security-critical code, components and APIs to identify vulnerabilities and recommend practical solutions.
- Evaluate and integrate security tools and automated security checks into our development and CI/CD processes.
- Analyze potential attack vectors and validate vulnerabilities using ethical hacking and application security techniques.
- Drive application security standards and continuously strengthen security awareness within our engineering teams.
THE REQUIREMENTS - What makes you successful
- Practical experience in Application Security, Software Security or Secure Software Development.
- Strong understanding of common application vulnerabilities, attack techniques and secure coding principles.
- Experience with code reviews, security testing and vulnerability analysis.
- Familiarity with security tools such as SonarQube, JFrog Xray or comparable SAST/SCA solutions.
- Knowledge of cloud-native environments, APIs and modern software development processes; experience with Kubernetes and CI/CD is an advantage.