• Own and lead incident response readiness across KOHO. • Plan and execute adversarial simulations: scope engagements, operate within defined rules of engagement, conduct offensive operations, and deliver findings that drive measurable security improvements. • Expand incident response readiness across KOHO and build response playbooks for marketing, data, legal, people & culture, risk, etc. • Conduct table top exercises with c-level to test risk acceptance and limitations. • Document lessons learned, operational improvements, and playbook updates. Execute all improvements. • Lead incident response/DFIR during a cybersecurity incident. • Conduct post incident documentation to determine contributing factors and lessons learned. • Design and deploy internal deception assets to detect lateral movement, insider threats, and unauthorized access across KOHO's environment. • Build external-facing deception capabilities, including fake credentials, canary tokens embedded in customer-facing surfaces, and decoy infrastructure seeded in breach databases and other attacker-accessible surfaces. • Instrument deception assets to generate actionable threat intelligence and feed findings back into detection logic, playbooks, and the broader threat model. • Build the triage and response workflow for deception-triggered alerts into existing SOC operations, from signal to investigation to lessons learned.

• Build Blazor WASM components with clean, reusable patterns and accessibility in mind • Implement Minimal API endpoints in .NET with OpenAPI, validation, and performance in focus • Contribute to our MAUI mobile app, including shared component libraries • Work with EF Core and SQL (Postgres); define/maintain database relationships and manage code-first EF Core migrations • Support real time UI behavior using SignalR where needed • Leverage Claude Enterprise to generate, refactor, and maintain test scripts efficiently, and help define best practices for AI-assisted testing on the team • Integrate authentication/authorization via Microsoft Entra ID (OIDC/OAuth2, MSAL, roles/scopes) • Ship via Azure DevOps (repos, pipelines, environments), following branch policies and PR reviews • Improve code quality through SonarCloud rules aligned with our standards • Generate and consume API clients from OpenAPI/Swagger for typesafe integration • Instrument services with distributed tracing and logging using Azure Application Insights • Help monitor service health, failure rates, and performance; participate in alert triage for staging/production • Work in three-week sprints with Product to refine user stories and acceptance criteria

Role Description Wir suchen einen echten Fullstack Entwickler (m/w/d), der sowohl im Backend als auch im Frontend zu Hause ist und unsere E-Commerce-Plattform technisch weiterentwickelt. Bei uns arbeitest du nicht nur „ein bisschen Frontend“ oder „nur API“, sondern entwickelst Features End-to-End – vom Datenmodell über die Geschäftslogik bis zur Angular-Komponente im Shop. Qualifications - Mindestens 3 Jahre Erfahrung in der Entwicklung von Web- oder E-Commerce-Anwendungen - Du fühlst dich sowohl im Backend als auch im Frontend wohl und kannst ein Feature eigenständig technisch durchdenken und umsetzen - Sehr gute Kenntnisse in Java (Spring Boot, Hibernate) - Kenntnisse in C# / .NET (z. B. ASP.NET Core, Entity Framework Core) von Vorteil - Erfahrung mit Angular (aktuelle Version), TypeScript, HTML und CSS (Less) - Sicherer Umgang mit SQL, Datenbankstrukturen und Datenmodellierung - Erfahrung mit GraphQL oder REST-Schnittstellen - Verständnis für Authentifizierungs- und Autorisierungskonzepte (z. B. OIDC, Keycloak) - Erfahrung in agilen Arbeitsweisen (z. B. Kanban mit Scrum-Elementen) - Erfahrung in der Zusammenarbeit mit verschiedenen Stakeholdern/Abteilungen - Deutschkenntnisse auf mindestens C1-Niveau Requirements - Nice to have Kenntnisse im Bereich CI/CD (Jenkins) - Erfahrung mit Docker und Kubernetes - Erfahrung mit Selenium (UI-/Webtests) - Erfahrung im E-Commerce-Umfeld Benefits - 30 Tage Urlaub - Urlaubs- und Weihnachtsgeld - Vermögenswirksame Leistungen - Betriebliche Altersvorsorge und Berufsunfähigkeitsvorsorge - Jobrad - EGYM-Wellpass: Firmenfitness mit Arbeitgeberzuschuss - FINN-Jobauto - Gleitzeitkonto - Möglichkeit zur persönlichen und fachlichen Weiterentwicklung - Sicherer Arbeitsplatz in einem zukunftsorientierten Unternehmen - Full Remote (wenn gewünscht)

• Champion AI-driven approaches to software architecture, solution design, development workflows, and product delivery. • Execute software architecture deliverables and take hands-on ownership of delivering critical initiatives across the product portfolio, ensuring scalability, reliability, extensibility, and maintainability. • Define and drive software architecture across the product portfolio, establishing architectural principles, frameworks, and standards in collaboration with engineering teams. • Lead and participate in the design review process within the Product organization, guiding architectural principles and ensuring alignment across teams. • Provide architectural leadership for software design and implementation, ensuring alignment across the Product organization through effective communication and collaboration. • Work closely with business stakeholders and foster strong cross-functional partnerships. • Provide technical leadership to development and test engineering teams, fostering innovation and driving engineering excellence. • Drive research and execution of Proof of Concepts (PoCs) on leading-edge AI technologies, including AI-powered solutions and intelligent automation, and recommend the best approaches for adoption across the product portfolio. • Participate in the engineering on-call rotation and support production systems by helping troubleshoot critical issues, drive root cause analysis, and ensure platform reliability and availability.