application security engineer

KNIME is a leading AI platform that helps organisations make sense of data through intuitive, scalable, and collaborative data science. It enables data professionals and business users to build, deploy, and manage AI and data workflows that support better decisions.

• Raise awareness of software security across KNIME, especially within the software development organization;
• Organize and lead internal trainings and workshops on security topics such as OWASP Top Ten;
• Partner with software architects and engineering teams to embed security best practices early in the SDLC;
• Track usage of third-party libraries through SBOM technologies, validate security issues, and ensure timely remediation;
• Improve automated tooling and processes for enhancing security posture together with the DevSecOps team and engineering leaders;
• Conduct periodic internal penetration tests and coordinate external penetration tests, including follow-up and issue tracking;
• Collaborate with IT and ISMS teams on compliance and certification topics such as ISO 27001 and SoC2.

• Degree in Computer Science or a related field;
• 5+ Years of experience as an Application Security Engineer;
• Strong technical knowledge of supply chain security, authentication and authorization standards, common vulnerabilities, secure coding practices, and issue remediation;
• Deep interest in software security research with up-to-date knowledge of emerging threats and best practices;
• Solid understanding of modern web applications and microservice architectures;
• DevSecOps and programming experience with ability to work closely with engineering teams;
• Fluent in English;
• Nice to have: German.

• Subsidized gym memberships and sport courses in select locations;
• Hybrid or remote options depending on location;
• Flexible working hours;
• Continuous learning through hands-on challenges, peer exchange, and exposure to cutting-edge security and AI topics.