Information Security Engineer - Application Security at Camunda · LumiJobs

Responsibilities

Hi there! We're hiring an Information Security Engineer with a focus on Application Security to join our Information Security team at Camunda.
We are a team that takes security seriously without making it feel like a locked door. We work in a transparent, straightforward way, and we care about doing the work right rather than just checking a compliance box.
Camunda is an AI-first company, and InfoSec is no exception: AI agents are part of how we review code, assess vulnerabilities, and build our tools. You will help shape how that works.
This is a hands-on role for someone who already has solid AppSec foundations and wants to grow. We are a generalist team, so you will also take part in our on-call rotation and incident response, and get exposure to other areas of security. But most of your time will be spent with engineers and building and maintaining internal tools and processes.
Vulnerability management: triage findings from SCA, container and code scanning, external reports and internal security testing; assess whether Camunda is actually affected; agree fix / mitigate / accept with engineering and follow through to release.
Threat modeling and security reviews: run threat modeling sessions and design reviews with R&D teams for new features and architecture changes, and turn the results into concrete, prioritised actions.
Code analysis with LLMs: use and improve LLM-assisted tooling (agents, prompts, reusable skills) to review code, validate findings and reproduce issues, while applying your own judgement to know when the model is wrong.
Build internal security tooling: contribute to the CVE registry and related automation that connects scanners, engineering teams, and customer communication. Much of it is built on Camunda itself.
Help engineers do the secure thing by default: answer questions, review pull requests, improve guidelines and occasionally run a session or workshop.
On-call and incident response: share the InfoSec on-call rotation with the other engineers and help investigate and resolve security incidents.
Support the wider team: help write security advisories for our customers, answer customer security questions and support audits.
What You Will Bring to the Role

Information Security Engineer - Application Security

Responsibilities

Qualification

Preferred

Benefits

Company

Camunda

More roles at Camunda