About the company:

As part of United Internet Group, with more than 9800 employees and 25 million fee-based customer contracts, we are Europe’s leading internet specialist and largest hoster. Building the roof for strong brands such as 1&1, IONOS, STRATO, GMX, WEB DE, MAIL COM, 1&1 Versatel and the Drillisch Online brands, United Internet offers a broad portfolio of Internet access products and cloud applications.

Present in Romania since 2003, we are an Engineering Centre that lives and breathes technology.

Our engineering culture is shaped by the use of cloud native technologies, microservices combined with a DevOps attitude and an innovative mindset. We have a customer centric culture where every colleague is a contributor to our products’ design and success working closely with teams in Bucharest and abroad. Our strength lies in our team spirit and a positive and respectful interaction. In Romania, we have passionate teams sustaining the business segments of Access/Telecommunication, Mail & Media and Hosting, working and enjoying the 1&1 culture together.

About the team:

1&1 Mail & Media operates WEB.DE & GMX, two of Germany's largest Internet portals, as well as an Internet portal catering to an international audience – mail.com. Through these brands, we are able to reach over 41 million users monthly, hosting 55% of Germany’s email accounts.

In addition to a large editorial news section and Germany's by far most popular free e-mail service, 1&1 Mail & Media offers paid subscriptions to a variety of internet-based services, such as paid e-mail accounts, virus protection software or web hosting services. In Romania, we are developing applications related to calendaring, online office editor (we active contributors to open source Libre Office community as well), messaging, lottery and web hosting products.

As an application security mentor, you are a member of a great engineering team, providing consulting to various 1&1 teams developing and operating products of brands WEB.DE, GMX and mail.com.

Main responsibilities:

•  Identification and reporting of security issues in our products in various lifecycle stages using black-box and white-box approaches;
•  Evangelization of security topics and introducing new innovative methods with the objective to increase the security awareness of the development teams and the security level of the products;
•  Continuous improvement of security competencies (penetration testing, threat modeling, code review) and introducing new ones according to the organization’s needs;
•  Improving and optimizing our secure software development processes, including automation approaches;
•  Participating in security incident management and security incident response;
•  Close cooperation with the application security team located in Germany, including occasional business trips.