Web Engineer

About The Company The Haufe Group is a leading provider of digital transformation solutions and consulting services, dedicated to empowering organizations and professionals to navigate the complexities of the modern workplace. With a strong focus on innovation, quality, and customer-centricity, the Haufe Group offers a diverse portfolio of products and services spanning HR, legal, tax, and business management.

The company prides itself on fostering a collaborative and inclusive work environment that encourages continuous learning and professional growth. As a pioneer in digital solutions, Haufe Group is committed to leveraging cutting-edge technologies to deliver value-driven solutions that meet the evolving needs of its clients across various industries.

About The Role We are seeking a dedicated Web-App Security Engineer to join our Security Enablement team. In this role, you will play a crucial part in ensuring the security and reliability of our applications, which serve over 1 million Lexware Office users and countless other clients.

Your primary responsibility will be to identify vulnerabilities, implement security measures, and support our development teams throughout the software development lifecycle. You will work in a dynamic, agile environment where your ideas and expertise will have a direct impact on enhancing the security posture of our products. This position offers a unique opportunity to deepen your knowledge in web application security, cloud security, and secure development practices while collaborating with talented professionals committed to excellence.

Qualifications The ideal candidate will possess extensive experience in web application security, cloud security (preferably with AWS), and secure software development. You should have a solid understanding of modern web technologies, including Java web applications and JavaScript frameworks like TypeScript. Proficiency in configuring and managing security tools, vulnerability assessment, and threat modeling is essential.

Experience with Infrastructure as Code (IaC), CI/CD pipelines, and SDLC processes is highly desirable. Strong scripting skills in Bash, Python, or similar are necessary for automation tasks. Excellent communication skills in German (minimum C2 level) and English are required to effectively collaborate across teams. Additionally, prior experience in incident response and vulnerability research will be considered a plus.

Responsibilities

• Assess and analyze security vulnerabilities within our web applications and cloud environments, providing actionable recommendations to mitigate risks.
• Collaborate closely with feature teams during the design, development, and deployment phases to embed security best practices and mechanisms.
• Develop, implement, and maintain security tools, scripts, and automated processes to streamline vulnerability detection and remediation.
• Conduct threat modeling exercises to identify potential attack vectors and develop strategies to defend against them.
• Participate in security incident response activities, investigating and resolving security breaches or incidents with a proactive mindset.
• Organize and facilitate security awareness sessions, including hacking days and team workshops, to foster a security-first culture.
• Stay informed about the latest security trends, vulnerabilities, and emerging threats to continuously enhance our security measures.
• Contribute to the development and refinement of security policies, standards, and procedures within the organization.

Benefits Joining the Haufe Group offers numerous benefits, including flexible working arrangements that support a healthy work-life balance, including options for remote work. You will have access to ongoing professional development opportunities, including training, certifications, and participation in industry events. Our comprehensive benefits package includes competitive salary, health and wellness programs, and generous paid time off. We foster a collaborative and inclusive work environment that values diversity and innovation. Additionally, you will have the chance to work on impactful projects that contribute to the digital transformation of organizations, all within a forward-thinking company dedicated to your growth and success. Equal Opportunity The Haufe Group is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, disability, or any other legally protected status.

We believe that diverse teams foster creativity, innovation, and better decision-making, and we are dedicated to providing equal employment opportunities to all applicants and employees.