Information Security Engineer - Application Security

Camunda is hiring an Information Security Engineer focused on Application Security to join its Information Security team. The role partners with R&D engineers on vulnerability management, threat modeling, secure code review, incident response, and AI-assisted security tools and workflows. Responsibilities Vulnerability management: triage findings from SCA, container and code scanning, external reports and internal security testing; assess whether Camunda is actually affected; agree fix / mitigate / accept with engineering and follow through to releaseThreat modeling and security reviews: run threat modeling sessions and design reviews with R&D teams for new features and architecture changes, and turn the results into concrete, prioritised actionsCode analysis with LLMs: use and improve LLM-assisted tooling (agents, prompts, reusable skills) to review code, validate findings and reproduce issues, while applying your own judgement to know when the model is wrongBuild internal security to