Application Security Engineer (f / m / d)

Stellenangebot Frankfurt School of Finance & Management is an EQUIS, AACSB and ABMA internationally accredited, research-orientated business school with university status. We offer comprehensive educational and advisory services to students, executives, graduates, participants, clients, and partners from all over the world. Frankfurt School’s Office of Information Technology provides IT services to a diverse community of more than 5,000 students, faculty and staff. Our ever-growing team conceptualises and implements innovative solutions in infrastructure engineering, digital transformation and technical support.

We are looking for you to join Frankfurt School’s Office of Information Technology as an Application Security Engineer (f / m / d) ASAP. This is a full-time permanent position.

Your Tasks

• Develop and enhance security-critical components within our systems as a part of our development team.
• Ensure security is embedded throughout the entire SDLC, collaborating closely with developers, product owners, and project managers.
• Continuously improve and maintain a high level of application security, identifying and mitigating potential risks.
• Provide guidance and training to developers on security best practices and maintain comprehensive security documentation.
• Define, monitor, and optimize security metrics to assess and enhance overall security posture.
• Conduct security assessments, incl. penetration testing and vulnerability analyses, to identify and address weaknesses.

Your Profile

• Degree in Computer Science or a related field, or equivalent practical experience.
• Professional experience in web application security, secure SDLC practices, or security testing.
• Strong understanding of REST, microservices, relational databases, and NoSQL, incl. their strengths and limitations.
• Profound knowledge of OWASP Top 10 and best practices to mitigate common security risks.
• Familiarity with cloud services (AWS experience beneficial).
• Experience with monitoring and security tools (e.g., Prometheus, Grafana, Wazuh), automation tools (e.g., Ansible, Terraform, Pulumi), and security methodologies (e.g., Threat Modeling, SAST, SCA) highly advantageous but not mandatory – curiosity and willingness to dive into security topics essential.
• Good English language skills (written and spoken); willingness to improve and apply German language skills.
• Strong communication skills as well as the ability to convey complex security concepts clearly.
• Commitment to continuous learning and professional development.

What we Offer

• Company pension scheme.
• Subsidised cafeteria.
• Additional vacation days for special occasions.
• Excellent transportation links.
• Exercise and fitness offers.
• Opportunities for education and professional development.
• Discounted public transport-ticket (Deutschlandticket).

Are you Interested? Please apply online! Your contact: