Application Security Engineer (all genders)

Our mission is to digitize the classic shopping stroll, turning it into a personalized, inspiring experience for every customer. Technology and data sit at the center of everything we build. We are not a fashion company with a tech team on the side. Tech drives our product, our strategy, and our growth.
Our proprietary tech stack powers our own shops and SCAYLE, our commerce infrastructure solution that serves over 350 brands globally. Same foundation, bigger stage. The challenges keep things interesting.

We are looking for an Application Security Engineer (all genders) to join the Application Security circle of our IT-Security unit, dedicated to protecting our online shop, our corporate systems and our customers.

In this role, you will hack internal systems, design and implement security measures to safeguard our infrastructure, applications, and data. You will work closely with other security engineers, developers and IT teams to ensure security best practices, automate security processes, and respond to emerging threats.

• Conduct regular penetration tests and code reviews

• Advise in the setup and maintenance of applications and infrastructure (usually hosted in AWS/Kubernetes)

• Triage and respond to monitoring events

• Optimization and automation of security auditing processes. This could also include setting up attack infrastructure, writing scripts in Python and implementing security scanning in Gitlab CI

• Take part in some incident response activities within the SOC, which include occasional 24/7 on-call

• At least 1+ year in a Junior-level position and overall min. 2+ years of experience in application security

• Strong background in threat modeling, penetration testing, and manual secure code reviews

• Fluency in Python for security automation, tooling, and code assessment

• Solid hands-on experience securing modern cloud environments (AWS or GCP)

• Demonstrated ability to manage complex technical security projects, align dependencies, and track deliverables across multi-functional engineering teams

Nice to have

• Certificates: e.g. OSCP, OSWP, etc.

• Knowledge of Laravel / PHP.

• Ability to read and understand JavaScript

• Ability to read and understand Go

• Experience with incident response activities

• Experience with web application firewalls, CDN providers, e.g. Cloudflare, Akamai

• Experience with Gitlab CI/CD Pipelines