Computer Scientist as Application Specialist - IT Security (f/m/d)

We are looking for an Application Security Specialist (SSDLC) to join us in a newly created role to support QIAGEN's application security strategy. The candidate will play a key role in identifying, designing and implementing consistent Secure Software Development Lifecycle practices for all QIAGEN technology projects. You will work closely with our Product Security Manager, Solution and Security Architects and DevOps teams to achieve this goal.

As a passionate and talented application security engineer with a good understanding of OWASP, Data Protection, Access Management, Software Vulnerabilities and best software design and threat modelling practices, in this hands-on role, you will be the subject matter expert on application security.

Duties and Responsibilities :

• Support application security assessments, including code reviews, threat modeling, and security testing, to identify and mitigate vulnerabilities.
• Collaborate with development teams to integrate security best practices into software design, coding, and deployment.
• Implement and maintain security tools such as static and dynamic analysis (SAST, DAST) to identify security issues early in the SDLC.
• Develop and enforce secure coding standards, conducting regular security training and awareness sessions for developers.
• Stay up to date with the latest security trends, threats, and technologies to continuously improve the security posture of our applications.
• Support compliance and regulatory requirements by ensuring security controls are implemented and maintained.

• Bachelor's degree in computer science, information security, or related field (or equivalent experience).
• Strong understanding of application security principles, secure coding practices, and security vulnerabilities (e.g., OWASP Top 10).
• Hands-on design, implementation and operation experience with security testing tools such as Burp Suite, OWASP ZAP, Snyk, Checkmarx, SonarCube, etc.
• Familiarity with cloud security (AWS, Azure, GCP) and DevSecOps practices.
• Hands on experience with Software Development in at least one programming language
• Experience with threat modeling and secure code review methodologies.
• Strong problem-solving skills and the ability to work collaboratively with cross-functional teams.
• A passion for cybersecurity and a proactive approach to continuous learning.

Bonus Skills:

• Relevant security certifications (e.g., CEH, CSSLP).
• Experience in automation of security testing within CI/CD pipelines.
• Knowledge of system and microservices architecture and securing containerized applications.

At the heart of QIAGEN are our people who drive our success. We act with passion, always challenging the status quo to drive innovation and continuous improvement. We inspire with our leadership and make an impact with our actions. We create a collaborative, safe and engaging workplace which forms the basis for high performing individuals and teams. We drive accountability and entrepreneurial decision-making and want you to excel your growth and shape the future of QIAGEN.

QIAGEN is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to ethnicity, color, gender, age, national origin, religion, romantic orientation, gender identity, status as a veteran, or disability.