Cyber Security Engineer - Platform & DevSecOps (m/f/d)

Job summary

Design and implement technical security architecture for large Kubernetes-based platform, software, and data infrastructures, with hands-on security hardening and validation from Linux hosts through clusters and applications. Responsibilities include penetration testing, securing Infrastructure as Code and CI/CD pipelines, strengthening Kubernetes and software supply-chain security, and improving monitoring and incident response. The role also assesses and secures AI and machine-learning infrastructure and applications.

Benefits

Qualifications

• Degree in computer science, cybersecurity, IT security, or software engineering, or comparable practical qualification
• Several years of hands-on experience in a technical security role
• Strong practical knowledge of Linux, networks, containers, Kubernetes, and cloud-native or platform architectures
• Experience securing Infrastructure as Code, CI/CD and DevSecOps processes, and Kubernetes environments
• Knowledge of network segmentation, TLS/PKI, IAM/RBAC, secrets, credentials, authentication, and authorization
• Experience with vulnerability analysis, penetration testing, technical root-cause analysis, and countermeasures
• Strong scripting or programming skills, such as Python, Bash, or Go
• Ability to combine security architecture with practical implementation and collaborate across engineering teams
• Structured and responsible work style, with strong written and spoken English
• Experience with red-team, blue-team, or purple-team approaches and adversarial testing
• Knowledge of software supply-chain security, Policy as Code, admission control, runtime security, monitoring, detection, or incident response
• Experience securing data platforms, object storage, databases, or data-intensive systems
• Knowledge of AI and machine-learning security or experience with highly secured, on-premises, edge, or intermittently disconnected infrastructure

Responsibilities

• Design, implement, and continuously develop security architecture for Kubernetes-based platform, software, and data infrastructures
• Analyze, harden, and validate Linux, container, and Kubernetes environments
• Conduct security assessments, penetration tests, and adversarial tests
• Secure Infrastructure as Code and integrate automated security checks and policy gates into CI/CD and DevSecOps processes
• Secure Kubernetes RBAC, workload isolation, admission policies, network policies, secrets, and runtime
• Strengthen software supply-chain security for dependencies, images, artifacts, SBOMs, signing, and provenance
• Analyze and secure network connections, segmentation, firewalls, gateways, TLS/PKI, APIs, and machine-to-machine communication
• Design and validate identity, authentication, authorization, secrets, credentials, certificates, and key management
• Protect data at rest, in transit, and during processing
• Model threats, analyze vulnerabilities, validate findings, and implement countermeasures
• Develop security monitoring, audit logging, and detection capabilities, and support incident analysis and resolution
• Assess security of AI and machine-learning infrastructure and applications, and develop proofs of concept into production-ready solutions

Skills

Degrees

Languages

Work schedule

Relocation