Senior DevSecOps Engineer (m/f/d)

Description

The company is Europe's leading online pharmacy, and this role sits in its Data & AI organization.

You will work with MLOps, Data Science, AI and engineering teams to make security a built-in part of how applications are developed and deployed.

You combine hands-on security engineering with practical guidance, covering the full development lifecycle and new security issues as they appear.

The tech stack includes GitHub and GitHub Actions, Azure DevOps, Kubernetes, Terraform and Python, plus Azure services such as Entra ID (AAD), Key Vault, Azure Policy, Defender for Cloud and Microsoft Sentinel.

Security tools in use include Aikido, Trivy, CodeQL, Dependabot, Checkov, tfsec, OPA/Gatekeeper and Kyverno. The Data & AI environment also uses Databricks, Unity Catalog and MLflow.

Responsibilities

• Build and maintain CI/CD pipelines that include security tests and controls, so engineering teams can ship quickly and safely.
• Improve security across applications and cloud-native systems by working hands-on with development teams on Kubernetes and container environments, finding risks and putting workable controls in place.
• Turn security requirements into guardrails, standards and solutions that AI/ML, MLOps and Data Science teams can use in daily development.
• Continuously find and assess vulnerabilities, help set their priority, and work with application teams on fixes and mitigation.
• Help with security testing, rollout and observability, advise teams when new security issues come up, and explore tools and automation that can further harden applications.

Requirements

• You have strong hands-on experience as a DevSecOps or Application Security Engineer, with enough depth to secure applications and software development in cloud-native and Kubernetes environments.
• You work at a Senior or Staff level, with the technical depth and independence to own complex security topics and turn requirements into practical solutions for engineering teams.
• You have hands-on experience with CI/CD security and GitHub, GitLab or comparable tools, including automating security guardrails, tests and checks in pipelines.
• You have solid skills in application and cloud-native security, including Kubernetes and container security, vulnerability management and CVEs, security scanning, triage, prioritization and remediation.
• You take a shift-left approach and like working closely with developers to build security into how software is written and deployed.
• Experience with Python and Data & AI or ML environments is a plus.

Conditions

This is a remote position based in Germany.

It may require occasional on-site work at the Berlin or Cologne offices, depending on business and team needs.

Where your job does not require presence in the office, your work location can be arranged individually.

Benefits

• Work from home for up to 20 days a year from anywhere in the EU, where your role allows it.
• Team events and regular celebrations with colleagues.
• Kindergarten grant of 100,00 € (total) per month for employees who pay for childcare.
• Free, anonymous access to psychologists for support with private or work-related stress.
• Support for career growth through internal and external training.
• A fully costed Deutschland Ticket for commuting, usable at any time.
• Membership package at Urban Sports Club, with sports offers matched to your interests.