Cyber Security Engineer - Platform & DevSecOps (m/w/d)

Job summary

Designs, implements, and validates security architecture for large Kubernetes-based platform, software, and data infrastructures, combining architecture work with hands-on security engineering. The role hardens Linux, container, and Kubernetes environments; conducts security assessments, penetration tests, and threat modeling; and integrates automated controls into Infrastructure as Code and CI/CD. It also addresses identity, networks, data protection, software supply chain security, incident detection, and AI/ML infrastructure security.

Benefits

Qualifications

• Degree in computer science, cybersecurity, IT security, software engineering, or equivalent qualification
• Practical experience in a technical security role such as security engineer, platform security engineer, DevSecOps engineer, or penetration tester; required duration unspecified
• Strong practical knowledge of Linux, networking, containers, and Kubernetes, plus understanding of cloud-native and platform architectures
• Experience securing Infrastructure as Code, CI/CD and DevSecOps processes, and Kubernetes environments
• Knowledge of network segmentation, TLS/PKI, IAM/RBAC, secrets, credentials, authentication, and authorization
• Experience with vulnerability analysis and penetration testing, including reproducing findings and implementing mitigations
• Scripting or programming skills in Python, Bash, Go, or a comparable language
• Ability to combine security architecture with practical implementation and collaborate across engineering teams
• Good spoken and written English
• Structured and collaborative working style
• Red-team, blue-team, purple-team, or adversarial testing experience is advantageous
• Software supply chain security knowledge, including SBOMs, artifact signing, provenance, dependency security, or trusted builds, is advantageous
• Policy as Code, admission control, or runtime security experience, including OPA/Gatekeeper, Kyverno, or Falco, is advantageous
• Security monitoring, detection engineering, or incident response experience in distributed Kubernetes or on-premises environments is advantageous
• Knowledge of AI/ML security or securing data platforms, databases, object storage, edge, on-premises, or intermittently connected infrastructure is advantageous

Responsibilities

• Design, implement, and continuously improve security architecture for Kubernetes-based platform, software, and data infrastructures
• Analyze, harden, and validate Linux, container, and Kubernetes environments from host to application
• Conduct security assessments, penetration tests, and adversarial tests to demonstrate vulnerabilities and attack paths
• Review and harden Infrastructure as Code and integrate automated security checks, gates, and policies into CI/CD and DevSecOps processes
• Secure Kubernetes environments, including RBAC, workload isolation, admission and network policies, secrets management, and runtime security
• Contribute to software supply chain security, including dependencies, images, artifacts, SBOMs, signing, provenance, and trusted builds
• Secure network connections and communications across platforms, data centers, external networks, and connected systems
• Design and validate identity, authentication, authorization, secrets, credentials, certificates, and key management
• Protect data at rest, in transit, and during processing in collaboration with platform and data engineering teams
• Perform threat modeling and vulnerability analysis, validate findings, and implement mitigations
• Improve security monitoring, audit logging, and detection capabilities and support security incident analysis and remediation
• Assess the security of AI/ML infrastructure and applications and develop proofs of concept into production-ready solutions

Skills

Degrees

Languages

Work schedule

Contract length

Relocation