About The Company
The Haufe Group is a leading provider of digital solutions and consulting services dedicated to transforming the way organizations manage their knowledge, processes, and workforce. With a strong focus on innovation and customer-centricity, the company offers a comprehensive portfolio that includes enterprise software, consulting, and training services tailored to various industries. Haufe Group prides itself on fostering a collaborative and forward-thinking environment, encouraging continuous learning and development among its employees. Committed to sustainability and social responsibility, the organization strives to create a positive impact within its community and the broader industry landscape.
About The Role
We are seeking a highly motivated Web-App Security Engineer (d/m/w) to join our dynamic Security Enablement team. In this role, you will be instrumental in ensuring the security and reliability of our applications that serve over a million users, including numerous small and micro-enterprises across Germany. Your primary responsibility will be to support the development teams in designing, implementing, and maintaining robust security measures throughout the entire software development lifecycle. You will work closely with cross-functional teams to identify vulnerabilities, develop security mechanisms, and promote best practices in web application security. This position offers an excellent opportunity to deepen your expertise in cloud security, penetration testing, and secure software development within a modern, agile environment. Flexibility in working from home and office is provided to support work-life balance and productivity.
Qualifications
The ideal candidate will possess a solid background in web application security, cloud security (preferably AWS), and modern development practices. You should have extensive experience in configuring, building, and releasing secure web applications, with proficiency in Infrastructure as Code (IaC), Continuous Integration/Continuous Deployment (CI/CD), and Software Development Life Cycle (SDLC). Knowledge of Java web applications and JavaScript/TypeScript web clients is essential, along with familiarity with dependency management tools such as NPM and Gradle. Development experience is necessary to automate tasks using Bash, Python, or other scripting languages. You should be comfortable with threat modeling, vulnerability assessment, and translating security findings into actionable recommendations. Excellent communication skills in German (minimum C2 level) and English are required. Additional experience in incident response is a plus, as well as a passion for continuous learning and innovation in security practices.
Responsibilities
- Collaborate with feature teams during the planning, development, and deployment phases to embed security best practices into our applications, ensuring data protection and system integrity.
- Identify, analyze, and remediate security vulnerabilities within our web applications, cloud environments, and infrastructure, providing clear guidance and recommendations to development teams.
- Design, implement, and maintain security mechanisms such as authentication, authorization, encryption, and intrusion detection to safeguard our products.
- Conduct regular security assessments, penetration tests, and threat modeling exercises to proactively identify potential risks and develop mitigation strategies.
- Automate security testing and deployment processes using scripting languages and integrate security tools into CI/CD pipelines to enhance efficiency and effectiveness.
- Develop and deliver training sessions and documentation to promote security awareness and best practices across teams.
- Engage in incident response activities, investigating security breaches, and supporting recovery efforts to minimize impact and prevent future incidents.
- Stay up-to-date with the latest security trends, vulnerabilities, and technological advancements, continuously enhancing the security posture of our organization.
Benefits
We offer a comprehensive benefits package designed to support your professional and personal growth. This includes flexible working hours and remote work options to promote a healthy work-life balance. You will have access to ongoing training and development programs, certifications, and participation in industry conferences. Our collaborative work environment encourages innovation, knowledge sharing, and teamwork. Additionally, we provide competitive salary packages, health and wellness programs, and opportunities for career advancement within a global organization. We believe in recognizing and rewarding your contributions and fostering a culture of inclusion and diversity.
Equal Opportunity
The Haufe Group is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees, regardless of gender, age, ethnicity, disability, sexual orientation, or background. We believe that a diverse workforce enhances our creativity, innovation, and overall success. We encourage applications from all qualified candidates who are passionate about security and technology and who wish to contribute to our mission of empowering organizations through digital transformation.