> Markdown version of [/jobs/ext/1580429-manager-it-security-application-security](https://www.wearedevelopers.com/jobs/ext/1580429-manager-it-security-application-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Manager IT- Security - Application Security

- **Company:** ista SE
- **Location:** Essen, Germany
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Software System Penetration Testing, Computing Platforms, Cloud Computing, Cyber Security, Continuous Integration, Open Web Application Security, Software Architecture, Secure Coding, Software Engineering, Software Vulnerability Management, Web Platforms, Software Security, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** July 31, 2026
- **Apply:** https://de.indeed.com/viewjob?jk=4977de2f1f1678eb

## About the Role

* Several years of experience in Application Security, Secure Software Development, or Software Architecture
 * Strong understanding of modern software development processes and secure development methodologies
 * Hands-on experience with OWASP Top 10, OWASP ASVS, OWASP SAMM, and relevant secure coding standards
 * Knowledge of Threat Modeling, Security Architecture Reviews, and Vulnerability Management
 * Experience with cloud technologies, web and API security, as well as modern development platforms and CI/CD processes
 * Ability to communicate technical risks effectively and provide guidance to a wide range of stakeholders
 * Excellent communication skills with the ability to successfully build, engage, and nurture communities, combined with a pragmatic and solution-oriented mindset; fluent English required, German language skills are an advantage

## Description

At ista, we empower property owners and managers to operate their buildings in a future-proof, energy-efficient, and digital way. To achieve this, we develop and run a wide range of business-critical applications and digital platforms.
In this role, you will actively drive the advancement of our application security landscape and work closely with international development and platform teams to ensure that security is embedded from the very beginning in applications, products, and architectural decisions. Together with our development teams, you will foster a culture where secure software development becomes the norm and security is recognized as a shared success factor.

 * Drive the evolution of our Application Security strategy and embed Security-by-Design and Security-by-Default principles across international software development teams
 * Advise Product Owners, Developers, Architects, and Platform Teams on the secure development and operation of applications
 * Define and establish standards, frameworks, and secure coding guidelines based on industry best practices such as OWASP, Microsoft SDL, NIST SSDF, and ISO 27034
 * Conduct security reviews, threat modeling sessions, and architecture assessments to identify and evaluate application security risks
 * Integrate security requirements and tools such as SAST, DAST, SCA, Secret Scanning, and Container Security into modern development and CI/CD processes
 * Collaborate closely with Development Squads, Platform Engineering, Architecture, and Pentesting Teams to remediate vulnerabilities and implement security requirements sustainably
 * Build and enhance an international Secure Development Community through training programs, Security Champion initiatives, and continuous knowledge sharing
 * Monitor emerging threats, vulnerabilities, and trends in Application Security and assess their relevance for ista


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Project Fugu: Extending the web](https://www.wearedevelopers.com/videos/832-project-fugu-extending-the-web)
- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)
- [Finding IT & Technology English-speaking Jobs in Germany ](https://www.wearedevelopers.com/magazine/446-finding-it-technology-english-speaking-jobs-in-germany)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)