Application Security Engineer in Berlin, Konstanz or Zurich in Berlin-Kreuzberg bei KNIME AG

Description

KNIME is growing rapidly and we’re seeking smart, motivated, and creative people up for the challenge of helping us achieve ambitious scaling goals while continuing to empower the active community. Right now, we are looking for an Application Security Engineer to join our team, based in Berlin, Konstanz, or Zurich.*

Who you are

You are an experienced application security specialist who has a passion for ensuring software security. More precisely:

• You have a degree in Computer Science or a related field.
• You have proven work experience as an application security engineer.
• You have technical knowledge of applied cryptography, standard security techniques, authentication and authorization standards and best practices, vulnerabilities, and issue remediation.
• You have a deep interest in software security research and follow developments in the field.
• You have a solid understanding of web applications and microservice architecture.
• You have software development experience in Java, Golang, or Python.
• Since we are a multinational company, proficient English language skills (both oral and written) are mandatory. Knowing German is a plus.

That's the job

We are looking for a software security specialist to set a high standard of security within all KNIME software products. This includes tasks such as:

• Raising awareness of software security within KNIME and specifically within the software development organization.
• Organizing internal training and workshops on software security topics. For example, leading a workshop on the OWASP Top Ten.
• Coordinating the usage and update of external libraries within KNIME software. This includes tracking CVEs and coordinating with product owners to push updates to affected libraries.
• Work closely with software architects to ensure software security best practices are followed.
• Periodically perform internal penetration testing of the KNIME Hub software and infrastructure.
• Coordinate external penetration testing including follow-up with product owners to ensure all discovered issues are tracked and fixed.
• Coordinate tracking KNIME-based CVEs and communicating CVE status to the customer care organization.
• Collaborate with corporate IT on issues of security, compliance, and certification.

About us