Our security tools continuously scan application code and live services, aggregating findings directly into DefectDojo. To keep this pipeline running reliably, we are looking for a committed Working Student (f/m/d) Security Tooling to handle failed scans, clear API bottlenecks, and prevent duplicate findings. The role has a clearly defined operational scope guided by standard runbooks. You will have a dedicated mentor from our Security Engineering team as well as a dedicated test environment where you can experiment safely without risk to production systems.

Tasks

• Operate and monitor our security tooling environment, specifically DefectDojo alongside SAST and DAST scanners.
• Rerun failed automated scans, analyze log files, and identify immediate root causes.
• Maintain and test integrations between tools, including REST APIs, webhooks, data importers, and ticket synchronization.
• Deploy updates and configuration changes, always validating them in the test environment first.
• Keep runbooks, known issues, and tool documentation accurate and up to date.
• Escalate recurring operational issues to the Security Engineer with the necessary diagnostic context.

Qualifications

• You work independently within established runbooks, communicate transparently, and prefer asking questions over guessing.
• Current enrollment in a degree program with an IT focus for the entire duration of employment.
• Basic knowledge of Linux environments and container concepts, with the ability to read and interpret log files.
• Fundamental scripting skills in Python or Bash, as well as experience with Git.
• Basic understanding of REST APIs, JSON, and YAML formats.
• Diligence in following operational runbooks and documenting modifications.
• Clear written communication for handovers and status updates.
• Initial practical exposure to cybersecurity concepts (e.g., through university courses, CTF challenges, or private projects) is advantageous.
• Business Fluency in German (CEFR C1) and English is required.

Benefits

• Hybrid working model.
• Flexible working hours through trust-based working hours.
• At some locations a subsidized canteen and various free drinks.
• Modern office space with very good transport connections.
• Various employee discounts for activities and products.
• Employee events such as summer and winter parties, as well as workshops.
• Numerous training and development opportunities.
• Various health offers, such as sports and health courses.