Developing modern, secure cloud and platform solutions in agile DevSecOps environments
Automating and implementing in-house security tooling for CI/CD pipelines
Building reusable CI/CD security components and templates (GitHub, Azure DevOps, GitLab)
Integrating and operating SAST and DAST solutions within CI/CD pipelines
Advising our clients on the appropriate use of cloud security services, taking into account effort, cost, maintenance, risk, and compliance aspects
Identifying common attack vectors and proactively hardening applications and infrastructure
Acting as a security advocate within engineering teams and promoting secure-by-design approaches

Degree in (business) computer science or an equivalent qualification
At least 5 years of relevant professional experience in DevSecOps, application security, and cloud/infrastructure environments
Strong understanding of cloud architectures, software development processes, and security best practices
Hands-on experience integrating SAST and DAST into CI/CD pipelines, including building reusable security templates
Solid knowledge of common attack vectors, particularly the OWASP Top 10
Programming experience for automation and custom security tooling, preferably in Rust (alternatively Go, Python, C#, Java, or TypeScript)
Basic proficiency with GitHub, Azure DevOps, and/or GitLab
Structured, conscientious work style as well as strong communication and teamwork skills
Business-fluent German and very good English skills

DevSecOps Engineer

Key skills