> Markdown version of [/jobs/ext/2474901-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/2474901-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Engineer

- **Company:** Diamant Software GmbH
- **Location:** Bielefeld, Germany (Remote available)
- **Contract:** Permanent contract
- **Skills:** Continuous Integration, Open Web Application Security, Software Engineering, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** August 11, 2026
- **Apply:** https://de.indeed.com/viewjob?jk=6415ee17a82790cb

## About the Role

* Du hast mehrjährige Erfahrung in Application Security oder Softwareentwicklung mit Security-Fokus.
 * Du kennst dich mit SAST/DAST/SCA-Tooling und CI/CD-Integration aus.
 * Du hast fundiertes Wissen zu OWASP Top 10, ASVS und Threat Modeling (z. B. STRIDE).
 * Du liest und bewertest Code sicher, idealerweise im .NET-Umfeld.
 * Du berätst gerne und verstehst dich als Enabler für die Entwicklung.
 * Du sprichst verhandlungssicher Deutsch und Englisch; CSSLP oder OSWE sind von Vorteil.

## Description

* Du verankerst Application Security im SDLC unseres SaaS-Produkts.
 * Du betreibst und erweiterst unsere AppSec-Toolchain (SAST, DAST, SCA, Secret Scanning) in den CI/CD-Pipelines.
 * Du bewertest und priorisierst Schwachstellen und begleitest die Entwicklungsteams bei der Behebung.
 * Du führst Security Reviews und Threat Modeling für neue Features durch.
 * Du gestaltest gemeinsam im Team Security-Trainings für unsere Entwickler:innen.
 * Du pflegst die Audit-Evidenz im Bereich Application Security (u.a. BSI C5).


## Related Videos

- [Bulletproof Web Applications: The 2025 OWASP Top Ten](https://www.wearedevelopers.com/videos/100072-bulletproof-web-applications-the-2025-owasp-top-ten)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [The Avengers Initiative (Practical Ethics for Software Engineers)](https://www.wearedevelopers.com/videos/2070-the-avengers-initiative-practical-ethics-for-software-engineers)
- [100 times more frequent deployments: How did we create a high performance team?](https://www.wearedevelopers.com/videos/1069-100-times-more-frequent-deployments-how-did-we-create-a-high-performance-team)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies)

## Related Articles

- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)