Senior Product Security Engineer / DevSecOps

Description

The company sells enterprise application software to organizations of every size and sector, helping them move from on-premise systems to the cloud.

It has served businesses for over 50 years across finance, procurement, HR, supply chain and customer experience.

You would join the team that protects one of the company's most strategic cloud platforms, a cloud data management service used for business-critical workloads worldwide.

The services run on Kubernetes and containers at large scale on all major cloud providers, and are reused across the analytics portfolio to provide a unified data and semantics layer for building mission-critical applications.

Responsibilities

• Build and run scalable microservices that deliver core security features for the data platform, using secure-by-design and DevSecOps methods.
• Add automated scanning, vulnerability handling, policy enforcement and compliance checks as core stages in CI/CD pipelines.
• Turn regulatory and internal security rules into code-driven controls that keep customers' environment trustworthy.
• Design and maintain access control, including RBAC models and authentication and authorization flows, as part of the platform's security architecture.
• Work with engineering teams from design through deployment so that security goals match development priorities.
• Manage infrastructure as code and policy as code so security settings stay consistent, auditable and repeatable.
• Monitor deployed security services and keep improving them for availability, performance and resilience, including support.

Requirements

• Experience building and running microservices in cloud-native environments using DevSecOps practices.
• Hands-on work with CI/CD pipelines and security automation tools such as Azure DevOps or Jenkins.
• Kubernetes security hardening, including pod security policies, network policies and secrets handling, plus experience with AWS, Azure or GCP.
• Knowledge of RBAC design, least-privilege access, and authentication methods such as OAuth 2.0, OIDC and SAML.
• Experience with encryption, secrets management and key rotation, using tools such as HashiCorp Vault or KMS.
• Scripting in Python and/or Go to automate security tasks, remediation and compliance reporting.
• Familiarity with log and observability tools such as Grafana or Loki to track security events and produce compliance proof.
• A collaborative approach to embedding secure practices across engineering teams.
• Candidates who do not meet every listed qualification are still encouraged to apply if they are keen on cloud security.

Conditions

Only permanent roles qualify for the internal employee referral program.

Successful candidates might need a background check carried out by an external vendor.

Use of AI in recruiting must follow the company's ethical guidelines, and breaches may lead to disqualification.

The company is an equal opportunity employer and offers accommodations to applicants with physical or mental disabilities.

The company offers flexible working models.

Benefits

• Hands-on work with the data platform's full technology stack and deep expertise in cloud-native security and compliance.
• A place in cross-project initiatives and key architecture decisions in a dynamic, future-focused setting.
• Paths into technical leadership and the chance to lead cross-organizational security work.
• Ongoing learning through mentoring, training and hands-on work with current cloud technologies.