Application Security Engineer (m/f/d)

Location: 51149 Cologne | Contract type: full/part time, unlimited | Job-ID: 961618

REWE digital – Your Home of IT We are the home for all those who cheat in the digital world. A tech team in which IT and non-IT specialists work together in a variety of areas. Together, we bring innovations to life – for the trade and everyday life of millions of people.

Tasks that keep you Building and continuous improvement of a Security Champion Program and alignment of community events such as Capture the Flag Improving security culture by training and coaching software engineers, executives, product owners with practical tasks in offensive security as well as security by design and secure coding. Creating guidelines that describe concrete, practicable activities and tools in the SDLC for software developers and thus make the requirements of the Information Security Management System manageable. Development and improvement of DevSecOps Security and Compliance Tools that integrate security according to Shift Left into the SDLC. Support the platform teams to integrate the tools into their platforms. Own-responsible, Agile's work in and with self-organized teams. Working with a tech stack, from microservices in GCP, Terraform, Kubernetes, Kafka, Elasticsearch, PostgreSQL, Java monoliths on VMs and SAP to the mainframe.

Features that make you Expertise in Web Application Security Testing, Cloud and Network Security Assessment Knowledge of Web Application Security e.g. vulnerabilities and solutions for the OWASP Top 10 Experience in creating guidelines and architectural specifications that meet the requirements of an ISMS according to ISO27001 You were Security Champion or Security Engineer in an Agile product team First experience in building security communities and security champion programs Prometheus, Grafana, Terraform, Kubernetes, Google Cloud Platform (GCP) you have mastered DevOps Mindset and interest in outcome-oriented, experimental, data-driven product development, as well as automation, CI/CD, DevOps, SDLC, DevSecOps and Microservice architectures Complete study of computer science with a recognizable focus on IT Security or a corresponding completed training. Alternatively, we are also pleased to receive applications from persons without corresponding training, but with many years of experience.

Basics that make life even better Your life-work integration through flexible working hours, mobile work, 30 days vacation + regional customs days, off-time models (sabbatical, nursing time etc.) and farm kindergarten. More time for you – use the possibility of up to two additional weeks of leisure per year; individually planable, in consultation with your team flexibly redeemable. We're investing in your future. With your annual training budget you can learn about your individual skills development. So stay curious and collect on our own learning platform, the 'IT Learning Hub', at specialist conferences, in specialist books or in one of many free workshops from our Learning Canvas new input for you and us all. Updates for you at in-house workshops and events, such as the Hackathon and Tech Talks as well as weekly stand-ups, regular Tech All-Hands and Open Door formats. Your impact because you develop applications and services for millions of people - with over 1 billion records daily, over 6 million mobile phones, 32,000 cash registers or in 7,300 markets. Your relaxed working path with the discounted Germany ticket, a service bike and parking right outside the door. Our networks like DITO - different together, SHINE, f.ernetzt, WomEngineers @REWE digital as well as Women's Drive make us a colorful community and support you in your personal development. Benefits of a group for you, e.g. in the form of discounts at REWE, PENNY, toom Baumarkt and DERTOUR Group, a comprehensive healthcare service, a support for your pension in the form of asset-effective services and REWE Pensionskasse, special services such as holiday and Christmas money, etc.

For more information, see jobs.rewe-group.com.

You still have questions about your online application or our application process? Then check our FAQ.

We stress that all people - regardless of gender/sex identity, ethnic origin and nationality, social origin, religion/worldview, physical and mental abilities, age as well as sexual orientation or other individual features - are equally welcome. .