<div class="show-more-less-html__markup show-more-less-html__markup--clamp-after-5 relative overflow-hidden"> <strong>About The Company<br/><br/></strong>The Haufe Group is a leading provider of digital transformation solutions, specializing in human resources, corporate compliance, and knowledge management. With a strong commitment to innovation and customer-centricity, the company empowers organizations to optimize their processes through cutting-edge technology and expert consulting. Haufe Group’s extensive portfolio includes software, cloud-based services, and professional training, making it a trusted partner for businesses aiming to succeed in an increasingly digital world. The company values diversity, collaboration, and continuous learning, fostering an environment where employees can thrive and contribute to meaningful projects that impact a wide range of industries.<br/><br/><strong>About The Role<br/><br/></strong>We are seeking a dedicated Web-App Security Engineer to join our dynamic Security Enablement team. In this role, you will play a crucial part in safeguarding our applications that serve over 400,000 small and micro-enterprises across Germany. You will be responsible for enhancing the security posture of our products by integrating security measures into the development lifecycle, analyzing vulnerabilities, and supporting our feature teams with expert guidance on security best practices. This position offers a unique opportunity to work in a fast-paced, innovative environment where your ideas and technical expertise will have a direct impact on the safety and reliability of our solutions. The role combines technical challenges with collaborative teamwork, emphasizing continuous learning and professional growth. Flexibility in work location, including remote work options, is available to support work-life balance.<br/><br/><strong>Qualifications<br/><br/></strong>The ideal candidate will possess a solid foundation in web application security, cloud security (preferably with AWS), and modern development practices. You should have extensive experience with secure configuration, build, and deployment processes, including Infrastructure as Code (IaC), Continuous Integration/Continuous Deployment (CI/CD), and Software Development Life Cycle (SDLC). Strong knowledge of Java web applications and JavaScript (TypeScript) web clients is essential, along with familiarity with dependency management tools such as NPM and Gradle. Development experience with scripting languages like Bash and Python is highly desirable, enabling automation and efficient troubleshooting. A good understanding of threat modeling, vulnerability assessment, and security best practices is required, along with the ability to communicate security concepts clearly to technical teams. Previous exposure to incident response processes is a plus. Fluency in German (minimum C2 level) and excellent command of English are mandatory, ensuring effective collaboration within our international team.<br/><br/><strong>Responsibilities<br/><br/></strong>Your key responsibilities will include evaluating and mitigating security vulnerabilities in our web applications, collaborating closely with feature teams during development, deployment, and operations to embed security measures from the outset. You will develop and maintain security mechanisms, conduct threat modeling exercises, and perform penetration testing to identify potential risks. Providing clear, actionable security recommendations to development teams is vital, ensuring best practices are followed throughout the product lifecycle. You will also stay abreast of emerging security threats and industry trends, actively participating in security initiatives such as hacking days and knowledge-sharing sessions. Building automation scripts and tools to streamline security processes will be part of your daily tasks. Additionally, you will contribute to creating a security-aware culture within the organization by sharing your expertise and mentoring colleagues when needed.<br/><br/><strong>Benefits<br/><br/></strong>Haufe Group offers a comprehensive benefits package designed to support your personal and professional development. You will have access to flexible working arrangements, including remote work options, to promote a healthy work-life balance. The company invests in ongoing training and development programs, encouraging continuous learning and skill enhancement. Employees benefit from a collaborative and inclusive work environment, with opportunities to participate in innovative projects and security initiatives. Additional perks include competitive salary packages, health and wellness programs, and social events that foster team spirit. Haufe Group values its employees and strives to create a workplace where everyone feels valued, motivated, and empowered to make a difference.<br/><br/>Equal Opportunity<br/><br/>The Haufe Group is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, ethnicity, gender, sexual orientation, age, disability, or any other characteristic protected by law. We believe that diverse teams drive innovation and success, and we are dedicated to providing equal employment opportunities to all qualified candidates. Our hiring process is transparent and fair, ensuring that everyone has the chance to contribute to our mission and grow within our organization. </div>