Senior DevSecOps Engineer (m/f/d)

Description

The company is Europe's leading online pharmacy and is building security into how its applications are developed and deployed. This role sits in the Data & AI organization and works with MLOps, Data Science, AI and engineering teams.

The team uses GitHub and GitHub Actions, Azure DevOps, Kubernetes, Terraform and Python, plus Azure services such as Entra ID (AAD), Key Vault, Azure Policy, Defender for Cloud and Microsoft Sentinel. Security tooling includes Aikido, Trivy, CodeQL, Dependabot, Checkov/tfsec and OPA/Gatekeeper or Kyverno. The Data & AI environment also uses Databricks, Unity Catalog and MLflow.

Responsibilities

• Design and maintain CI/CD pipelines that include security tests and controls, so engineers can ship quickly without weakening security.
• Work hands-on with development teams on Kubernetes and container workloads to find risks and put workable controls in place.
• Turn security requirements into guardrails, standards and solutions that AI/ML, MLOps and Data Science teams can use in daily work.
• Find and assess vulnerabilities and CVEs on an ongoing basis, help set priorities, and guide application teams through mitigation and fixes.
• Help with security testing, rollout and observability, advise teams when new security issues appear, and evaluate tools and automation that could improve application security.

Requirements

• Strong hands-on experience as a DevSecOps or Application Security Engineer, with depth in securing applications and software delivery across cloud-native and Kubernetes environments.
• Senior or Staff level skills: you can own complex security topics on your own and turn requirements into practical solutions for engineering teams.
• Hands-on experience with CI/CD security and tools such as GitHub, GitLab or similar, including automating security checks, testing and guardrails in pipelines.
• Solid knowledge of application and cloud-native security, including Kubernetes and container security, vulnerability management and CVEs, security scanning, triage, prioritization and remediation.
• A shift-left mindset and comfort working closely with developers to build security into how software is written and deployed.
• Experience with Python and Data & AI or ML environments is a plus.

Conditions

Remote position based in Germany.

Occasional on-site collaboration may be required at the Berlin or Cologne offices, depending on business and team needs.

Equal opportunity: applicants are considered regardless of background.

Benefits

• Work from home: if the job does not require office presence, your work location can be arranged individually, including up to 20 days a year anywhere in the EU.
• Team events and regular celebrations of successes.
• Kindergarten grant of 100,00 € (total) per month for employees who pay for kindergarten childcare.
• Free, anonymous access to psychologists for help with stress in private or work life.
• Support for career development through internal and external training.
• Fully paid Deutschland Ticket that can be used at any time.
• Urban Sports Club membership (M package) for sports offers matched to your interests.