Application Security Engineer (f/m/d) Berlin, Germany (Hybrid)

Purpose Establish and lead an Application Security program within the Product and Technology department, acting as an evangelist for application security and earning the trust of engineers and managers alike.

What you'll be responsible for - Secure the SDLC by integrating security tooling (SAST, DAST, dependency scanning) into CI/CD pipelines and IDEs; automate and optimise checks so teams can identify and fix issues early. - Threat modelling and secure design: Collaborate with product and engineering teams during the design phase to conduct threat modelling sessions and pre-implementation security reviews. - Code and architecture reviews: Guide developers on secure coding practices, perform targeted code reviews, and help resolve vulnerabilities with actionable remediation support. - Vulnerability lifecycle management: Identify, triage, track and report vulnerabilities across internal and external apps and systems; collaborate with engineers to close gaps efficiently; support the bug bounty process with finding validation; present vulnerability management reports to heads of department. - AI/ML & LLM security: Provide guidance on secure development of AI/ML-powered features; help teams manage risks such as prompt injection, model misuse, and data leakage; lead threat modelling exercises for AI components and advise on secure integration patterns. - Incident response collaboration: Support investigation and root cause analysis of application-layer incidents; contribute to post-incident reviews and longer-term

Application Security Engineer (f/m/d) Berlin, Germany (Hybrid)

Purpose Establish and lead an Application Security program within the Product and Technology department, acting as an evangelist for application security and earning the trust of engineers and managers alike.

What you'll be responsible for - Secure the SDLC by integrating security tooling (SAST, DAST, dependency scanning) into CI/CD pipelines and IDEs; automate and optimise checks so teams can identify and fix issues early. - Threat modelling and secure design: Collaborate with product and engineering teams during the design phase to conduct threat modelling sessions and pre-implementation security reviews. - Code and architecture reviews: Guide developers on secure coding practices, perform targeted code reviews, and help resolve vulnerabilities with actionable remediation support. - Vulnerability lifecycle management: Identify, triage, track and report vulnerabilities across internal and external apps and systems; collaborate with engineers to close gaps efficiently; support the bug bounty process with finding validation; present vulnerability management reports to heads of department. - AI/ML & LLM security: Provide guidance on secure development of AI/ML-powered features; help teams manage risks such as prompt injection, model misuse, and data leakage; lead threat modelling exercises for AI components and advise on secure integration patterns. - Incident response collaboration: Support investigation and root cause analysis of application-layer incidents; contribute to post-incident reviews and longer-term