Senior DevSecOps Engineer - Cloud, AI & Crypto Security

Sygnum Bank; Zürich; Hybrid; CHF 150.000 - 190.000; Vollzeit

Benefits dieser Stelle

Market salary + incentive scheme

Flexible/Work at home policies

Mentoring and Buddy programs

Sabbatical after 5 years

Zusammenfassung

Sygnum is expanding its security function and seeks an experienced application security engineer to own and advance secure-by-design practices across cloud-native platforms. You will embed security into CI/CD, evaluate AI-enabled services, and help design robust threat models in a dynamic, crypto-native banking environment.

You will collaborate with engineering, platform, and product teams to strengthen secure development, mentor teams, and drive secure cloud deployment patterns while aligning

Qualifikationen

• 5-7+ years of hands-on experience in application security or DevSecOps in modern engineering environments.
• Experience securing cloud-native architectures (AWS and Azure preferred).
• Deep understanding of Kubernetes security, containers, and IaC security.
• Experience reviewing Infrastructure-as-Code and performing secure code reviews across backend, web, and/or mobile applications.
• Practical knowledge of application security standards, e.g., OWASP Top 10 and API Top 10 in real-world systems.

Aufgaben

• Integrate and improve security controls within CI/CD pipelines including SAST, DAST, SCA, and IaC scanning to strengthen DevSecOps practices
• Configure, operate, and optimise application security tooling, ensuring findings are actionable and integrated into engineering workflows
• Partner with engineering, platform, and product teams to design and implement secure-by-design architectures, perform threat modelling and promote secure development practices
• Evaluate open-source dependencies and contribute to software supply chain security initiatives
• Assess and secure AI-enabled applications and services, including AI/LLM integrations, AI supply chain risks, model security controls, and secure deployment patterns
• Review and harden Infrastructure-as-Code implementations to enable secure cloud deployment patterns and reusable guardrails

Kenntnisse

Application security

DevSecOps

Cloud security

Kubernetes security

Threat modelling

Secure development

API security

AI security

Cryptography basics

Regulatory knowledge

Ausbildung

Bachelor's degree in Computer Science or related

Security certifications (CISSP/OSCP)

Tools

AWS

Azure

Kubernetes

IaC scanning

SAST/DAST

CI/CD tooling

Jobbeschreibung

Sygnum is expanding its security function and seeks an experienced application security engineer to own and advance secure-by-design practices across cloud-native platforms. You will embed security into CI/CD, evaluate AI-enabled services, and help design robust threat models in a dynamic, crypto-native banking environment.

You will collaborate with engineering, platform, and product teams to strengthen secure development, mentor teams, and drive secure cloud deployment patterns while aligning