Application Security Engineer (m/f/d)

Welcome to EPG With more than 1,600 customers, EPG is one of the world’s leading providers of a comprehensive supply chain execution suite (EPG ONE) and offers WMS, WCS, WFM, TMS, and voice solutions to optimize logistics processes. Logistics consulting, cloud services, managed services, and logistics training at its own academy round out EPG’s comprehensive range of solutions. THE POSITION - This is what we are all about Help us build software that is secure by design.

As an Application Security Engineer (m/f/d), you work closely with our development teams to identify security risks early, improve secure coding practices, and strengthen the security of our SaaS platform. With a white-hat hacker mindset, you think like an attacker – and help our developers stay one step ahead. THE TASKS - You make a difference Advise development teams on secure software design, architecture and coding practices.

Review security-critical code, components and APIs to identify vulnerabilities and recommend practical solutions. Evaluate and integrate security tools and automated security checks into our development and CI/CD processes. Analyze potential attack vectors and validate vulnerabilities using ethical hacking and application security techniques.

Drive application security standards and continuously strengthen security awareness within our engineering teams. THE REQUIREMENTS - What makes you successful Practical experience in Application Security, Software Security or Secure Software Development. Strong understanding of common application vulnerabilities, attack techniques and secure coding principles.

Experience with code reviews, security testing and vulnerability analysis. Familiarity with security tools such as SonarQube, JFrog Xray or comparable SAST/SCA solutions. Knowledge of cloud-native environments, APIs and modern software development processes; experience with Kubernetes and CI/CD is an advantage.

What we offer We believe that work can be fun and fit into your life. And that’s why, in addition to our colorful and talented team, the best clients, and the most diverse projects and products, we also offer the following: Onboarding to help you arrive. An onboarding plan in advance so you know what to expect.