Security & QA Engineer (m/w/d)

Would you like to identify security vulnerabilities, improve the quality of complex open-source software, and set up automated testing environments to do so? Then support us with security testing, quality assurance, and test automation for our Linux-based software solutions.

Apply now

We are looking for YOU!

Tasks

Planning and conducting white-box and gray-box penetration tests
Performing security analyses of Linux systems, web applications, APIs, network services, and configurations
Identifying, assessing, and documenting vulnerabilities and attack scenarios
Performing and enhancing vulnerability scanning, dependency scanning, static application security testing, dynamic application security testing, and fuzzing
Providing actionable recommendations and verifying implemented fixes
Performing manual, exploratory, and automated functional, integration, and regression tests
Developing and maintaining test strategies, test cases, and automated security and QA tests
Setting up and maintaining reproducible test infrastructures using Ansible and OpenTofu
Integrating tests and security checks into GitLab CI/CD pipelines
Working closely with the software engineering team

Requirements

A degree, apprenticeship, or comparable practical experience in computer science, IT security, or software development
Experience in penetration testing, security testing, or analyzing technical vulnerabilities
Experience with tools and methods such as vulnerability scanning, dependency scanning, static application security testing, dynamic application security testing, or fuzzing
Very strong knowledge of Linux systems
Knowledge of web, API, network, and server security
Experience with test automation and quality assurance
Experience with container technologies such as Podman or Docker
Knowledge of Python and shell scripting
Experience with Ansible, as well as OpenTofu or Terraform
Proficiency in using Git, GitLab, and CI/CD pipelines
An analytical and structured approach to work, with the ability to work independently
Good written and spoken German and English

A Plus

We’d be especially pleased if you’ve already worked with security tools such as Burp Suite, OWASP ZAP, Nmap, Trivy, or Grype. Additional experience with Kubernetes, virtualization or cloud platforms, as well as Puppet, is also welcome. Knowledge of Ruby on Rails, React, Foreman, or Katello will help you get started, but is not a prerequisite. We also welcome contributions you’ve made to open-source projects.

You Can Look Forward to

Onboarding: sorgfältige und individuelle Einarbeitung
Weiterentwicklung: abwechslungsreiche Aufgaben sowie interne und externe Schulungs- und Fortbildungsangebote
Work-Life-Balance: flexible working hours and remote work possible
Mitarbeiterangebote: Fitness, Jobrad, Obst, Beitrag zur Altersversorgung, kostenlose Parkmöglichkeit und U-Bahn-Nähe
Unternehmenskultur: sympathisches, offenes und motiviertes Team mit flachen Hierarchien und kurzen Entscheidungswegen, in dem eigene Ideen und Mitgestaltung gewünscht sind
Award-winning employer “Great Place to Work”

GET IN TOUCH WITH US!

We are looking forward to your application including CV!

Contact: Ms. Ingrid Harner, Head of Marketing, Sales, and HR

Telephone: +49 89 452 35 38-0

Apply now

You have taken note of the privacy policy of ATIX AG and you agree with the processing of the submitted data. You confirm this by sending your e-mail.