.Security Engineer - Application Security As an international financial services provider, Allianz offers worldwide products and solutions in insurance and asset management. At Allianz Technology, our Information Security Operations team is the driving force behind our cybersecurity strategy, developing global solutions to protect Allianz from evolving threats. As part of this mission, Allianz Vulnerability Management (AVM) plays a key role in detecting, analyzing, and reporting vulnerabilities across business and technological systems. We're seeking a passionate Security Engineer for our Web Application Security team to lead web application security assessments, guide stakeholders, and integrate security solutions into DevSecOps workflows, ensuring the protection of Allianz's business applications. What you can find at Allianz Technology: Work Life - Balance: We offer flexible working hours so you can start your working day according to your needs. In addition, during the summer and every Friday of the year, you have the option of intensive working hours, which will allow you to enjoy more free time for yourself. International and Multicultural Environment: We value the diversity and richness that comes from working in an international and multicultural environment. With more than 52 different nationalities represented in our company, we offer our employees the opportunity to collaborate with people from all over the world, enriching the work environment and providing the opportunity to learn and grow in a truly global setting. Professional Growth Opportunities: We are committed to the professional development of our employees and provide numerous opportunities for growth within the company. Compensation and Benefits Package: It includes a company bonus plan, pension, employee stock program, and multiple employee discounts. What will make you succeed in this position? Excellent knowledge of application security and SDLC process Excellent knowledge of industry-standard tools, methodologies and standards (OWASP TOP10) 3-5 years of hands-on experience with web application security testing 3-5 years of hands-on experience with Qualys Web Application Scanning (WAS), Nessus and similar tools Broad background in Application Security and Vulnerability Management end-to-end process, including WAFs Very good social and communication skills Familiarity with risk management process and ISMS frameworks (ISMS 27001) Develop internal and/or external documentation, such as detailed procedures, playbooks, and operational metrics reports You must possess and demonstrate the ability to work fully independently and solve complex problems or situations based on multiple sources of information