We are seeking an Application Security Engineer with a strong background in web application security design, secure development practices, and vulnerability testing. This role also requires practical experience with Software Bill of Materials (SBOM) management and implementation, contributing to our secure SDLC and software supply chain risk reduction efforts.

Duties and Responsibilities:

• Perform threat modeling, security architecture review, and design analysis for web applications and APIs.
• Conduct manual and automated security testing during development and pre-release stages.
• Design and implement security pipelines (including SAST and DAST) and integrate them into the SDLC process.
• Implement and manage SBOM generation and consumption processes across the SDLC.
• Collaborate with development teams to ensure timely remediation of identified vulnerabilities.
• Maintain security guidance aligned with OWASP best practices and provide trainings for development teams.
• Stay current with evolving application security threats, tools, and industry developments.

Qualifications and Experience:

• 3–5 years of experience in application security, with a focus on web applications and API security.
• Good knowledge of at least one scripting or programming language (e.g., Python, JavaScript, C#, or Go).
• Experience with tools like OWASP ZAP, Burp Suite, Snyk, or similar.
• Familiarity with secure coding, DevSecOps, and container security concepts.
• Strong understanding of CVE, CVSS, and vulnerability disclosure workflows.
• Excellent command of business English.
• Preferred Qualifications:
• Knowledge of SBOM standards (CycloneDX, SPDX) and experience integrating SBOM tooling into CI/CD pipelines.
• Knowledge of software composition analysis (SCA) tools.

We are looking for a Pricing Engineer who will strengthen our Sales team. The role requires extensive practical experience as a CNC Technologist. Projects are mainly international, therefore knowledge of written technical and, to a sufficient extent, business English is a must. You must be competent to read ISO standardized drawings in English and communicate directly in writing with the customer to clarify unclear technical requirements.

Functional responsibilities:

• Analysis of incoming drawings / CAD models in English / German;
• Calculation of production costs (materials + machine hours + post-processing);
• Providing process recommendations (if necessary);
• Formalizing the results of calculations and transferring them to colleagues from the commercial department;
• The main criterion for evaluating an employee in this position: quality and efficiency of processing incoming requests (ideally within 1-2 working hours after receipt);
• Systematization of their work, participation in setting tasks to automate processes.

Requirements for applicants:

• Graduate engineering degree - Metalworking Process Engineer, Design Engineer or similar;
• 5+ years of experience in metalworking / mechanical engineering;
• Expert knowledge of various metalworking methods: turning, milling, CNC machining, electrical discharge machining, sheet metal working - laser, waterjet, plasma cutting, welding;
• Knowledge of various metal post-processes: polishing, hardening, heat treatment, anodizing, sanding/blasting, coatings, painting, etc.;
• Knowledge of different construction materials and their processing properties: metals, plastics, composite materials;
• Good knowledge of English for reading drawings. If there was experience in reading drawings in German - a big plus;
• IT enthusiast, ready to master and use modern technologies and software;
• Willingness and desire to work in a fast-growing business atmosphere.

We offer:

• Remote full-time job.
• Working hours - CET (Monday to Friday).
• Fixed rate depending on the career level.
• Significant annual bonus.
• Overtime hours are possible for this position.
• Corporate Laptop.
• Free corporate language courses.
• Service agreement.
• Team spirit and friendly atmosphere: we work in an open, friendly and trusting environment that welcomes initiative. In the Xometry team, everyone is ready to help and support in difficult times, and we always celebrate victories together and appreciate the contribution of everyone.
• Development opportunities: we are a fast growing company, each new task is an interesting challenge for the team.
• We care: ongoing free of charge well-being activities for our people, charity projects worldwide.
• Flexibility: speed and flexibility are some of our advantages, allowing us to achieve amazing results. We have flexible processes and planning, we can respond to rapidly changing conditions and remain effective in the face of uncertainty.
• Onboarding: well structured onboarding plan for new employees combining all in one process, technology, and systems components.

#LI-Remote