DevSecOps Engineer Kubernetes & AI-Platform-Security (m/w/d) befristet auf 2 Jahre

Job summary

As a DevSecOps Engineer, you will be responsible for the technical security of the AI platform based on Kubernetes, conducting threat modeling and risk analyses, and ensuring the security of the software supply chain.

Qualifications

• Several years of experience in cloud, platform, or IT security
• Strong understanding of Kubernetes security
• Experience with container and supply chain security
• Practical experience with secrets management, ideally with Vault
• Experience with threat modeling, risk analyses, or security incident response
• Good understanding of Kubernetes, Terraform, Helm, and GitOps
• Experience with monitoring and logging solutions
• Knowledge of BSI-Grundschutz, ISO 27001, and DSGVO
• Experience with C5, KRITIS, or NIS2 is a plus
• Pragmatic security mindset
• Good German language skills (min. C1 level)

Responsibilities

• Responsible for technical security of AI platform based on Kubernetes
• Conduct threat modeling and risk analyses for new AI applications
• Provide security reviews and technical recommendations during rollouts
• Harden Kubernetes environments
• Work with existing policy-as-code approaches, especially Kyverno
• Secure the software supply chain
• Manage and automate secrets management with Vault
• Develop security monitoring further
• Support vulnerability management and security incidents
• Translate requirements from BSI-Grundschutz, ISO 27001, and DSGVO into technical measures
• Advise DevOps and development teams

Skills

Relocation