Senior DevSecOps Engineer (m/f/d)

Description

The company is Europe's leading online pharmacy, and this role sits in its Data & AI organization. You will work with MLOps, Data Science, AI and engineering teams to make security a standard part of how applications are built and shipped, mixing hands-on security engineering with practical guidance for teams facing new security issues.

The stack includes GitHub and GitHub Actions, Azure DevOps, Kubernetes, Terraform and Python, plus Azure services such as Entra ID (AAD), Key Vault, Azure Policy, Defender for Cloud and Microsoft Sentinel. Security tooling includes Aikido, Trivy, CodeQL, Dependabot, Checkov, tfsec, OPA/Gatekeeper and Kyverno. The Data & AI environment also uses Databricks, Unity Catalog and MLflow.

Responsibilities

• Build and maintain CI/CD pipelines that include security testing and controls, so engineering teams can ship quickly without losing security.
• Harden applications and cloud-native workloads by working directly with development teams on Kubernetes and containers, finding risks and putting practical controls in place.
• Turn security requirements into guardrails, standards and solutions that AI/ML, MLOps and Data Science teams can use in daily development.
• Continuously find and assess vulnerabilities and CVEs, help set priorities, and work with application teams on mitigation and fixes.
• Contribute to security testing, rollout and observability, advise teams when new security issues appear, and explore tooling and automation to strengthen application security.

Requirements

• Strong hands-on experience as a DevSecOps or Application Security Engineer, with depth in securing applications and software delivery across cloud-native and Kubernetes environments.
• Senior or Staff level skills: you can own complex security topics on your own and turn security requirements into workable solutions for engineering teams.
• Hands-on experience with CI/CD security and with GitHub, GitLab or comparable tools, including automating security guardrails, tests and checks in pipelines.
• Solid expertise in application and cloud-native security, covering Kubernetes and container security, vulnerability management and CVEs, security scanning, triage, prioritization and remediation.
• A shift-left mindset and enjoyment of working closely with developers to build security into development and deployment. Python and Data & AI/ML experience is a plus.

Conditions

Remote position based in Germany. Occasional on-site collaboration at the Berlin or Cologne offices may be required, depending on business and team needs.

Equal opportunity applies to all candidates.

Benefits

• Remote work: if your role does not require an office presence, your work location can be arranged individually, including up to 20 days a year anywhere in the EU.
• Team events and regular parties to celebrate successes together.
• Kindergarten grant of 100,00 € (total) per month for employees who pay for kindergarten childcare.
• Free, anonymous psychological support for stress in private or professional life.
• Internal and external training and support for career development.
• A fully paid Deutschland Ticket usable at any time.
• Urban Sports Club membership (M package) with a range of sports options.