Cyber Security Engineer - Platform & DevSecOps (m/f/d) at Rheinmetall

Rheinmetall; Bremen; On-site; EUR 85,000 - 120,000; Full time

Benefits offered by this job

Company pension scheme

Share purchase programme

30 days of holiday

Deutschlandticket

Relocation support

Mobile working

Professional development via Rheinmetz

VIVA family service

Job summary

Rheinmetall in Bremen seeks a Cyber Security Engineer for Platform & DevSecOps to design and harden security architecture for large Kubernetes-based platforms. You will perform penetration tests, security validation, and implement CI/CD security gates across on-site infrastructure.

The role requires strong Linux/containers experience, knowledge of IAM/RBAC, TLS/PKI, and software supply chain security, with English communication skills and a collaborative mindset.

Qualifications

• Degree in computer science, cybersecurity, or equivalent practical qualification.
• Hands-on security role experience (Security Engineer, DevSecOps, Penetration Tester).
• Strong Linux, networking, containers, Kubernetes knowledge; cloud-native architectures.

Responsibilities

• Design and develop security architecture for Kubernetes-based platform and data infrastructure.
• Hardening and validation of Linux, containers, and Kubernetes environments.
• Conduct security assessments, penetration tests, and adversarial testing on platforms.
• Integrate security checks into CI/CD and policy-as-code workflows.
• Secure software supply chain including SBOM, signing, provenance, and trusted builds.

Skills

Linux security

Kubernetes

CI/CD security

Python scripting

Threat modeling

Education

Bachelor's degree in CS/IT security

Tools

OPA/Gatekeeper

Falco

SBOM tooling

Job description

Apply for Cyber Security Engineer - Platform & DevSecOps (m/f/d) at Rheinmetall in Bremen, HB, DE. This Full time on site position offers great opportunities for career growth. Ref.-Nr.: DE20972 Schedule type: Full Time Contract Type: Permanent Position

WHAT WE ARE LOOKING FOR

• Design, implementation, and continuous development of the technical security architecture for large Kubernetes-based platform, software, and data infrastructures
• Hands-on analysis, hardening, and security validation of Linux, container, and Kubernetes infrastructures—from the host through the cluster to the application
• Conducting technical security assessments, penetration tests, and adversarial security tests against our own platforms and components to practically demonstrate vulnerabilities and realistic attack vectors
• Security review and hardening of Infrastructure as Code, as well as integration of automated security checks, security gates, and Policy-as-Code mechanisms into CI/CD and DevSecOps processes
• Securing Kubernetes environments, including RBAC, workload isolation, admission policies, network policies, secrets management, and runtime security
• Helping to shape a secure software supply chain, including for dependencies, container images, artifacts, SBOM, signing, provenance, and trusted build and deployment processes
• Analyzing and securing network connections and communication paths between platforms, data centers, external networks, and connected systems, including segmentation, firewalls, gateways, TLS/PKI, APIs, and machine-to-machine communication
• Design and technical validation of identity, authentication, and authorization concepts for users, services, and workloads, as well as secrets, credentials, certificates, and key management
• Ensuring the protection of data at rest, in transit, and during processing in close collaboration with platform and data engineering teams
• Conducting threat modeling, vulnerability analysis, and technical validation of findings; deriving and implementing effective countermeasures
• Further development of security monitoring, audit logging, and detection capabilities, as well as support for the technical analysis and resolution of security incidents
• Participate in the security assessment of AI/machine learning infrastructures and AI-based applications, and implement security proofs of concept through to production-ready solutions

WHAT QUALIFICATIONS YOU SHOULD HAVE

• A degree in computer science, cybersecurity, IT security, software engineering, or a comparable practical qualification
• Several years of hands‑on experience in a technically oriented security role, e.g., as a Security Engineer, Platform Security Engineer, DevSecOps Engineer, or Penetration Tester
• Very strong practical knowledge of Linux, networks, containers, and Kubernetes, as well as a solid understanding of modern cloud‑native and platform architectures
• Practical experience in securing Infrastructure as Code, CI/CD/DevSecOps processes, and Kubernetes environments
• In‑depth knowledge of network segmentation, TLS/PKI, IAM/RBAC, secrets, and credentials, as well as common authentication and authorization concepts
• Experience with vulnerability analysis and penetration testing, as well as the ability to reproduce findings in practice, understand technical root causes, and implement appropriate countermeasures
• Strong scripting or programming skills, e.g., in Python, Bash, Go, or a comparable language, particularly for automation and security testing
• Ability to integrate security architecture with practical implementation and to collaborate effectively with platform, software, network, and data engineering teams
• A structured, responsible work style and strong written and spoken English skills
• Experience with red‑team, blue‑team, or purple‑team approaches and adversarial testing in complex platform environments
• In‑depth knowledge of software supply chain security, e.g., SBOM, artifact signing, provenance, dependency security, or trusted build processes
• Experience with Policy as Code, admission control, and runtime security, e.g., with OPA/Gatekeeper, Kyverno, Falco, or comparable solutions
• Knowledge of security monitoring, detection engineering, and incident response in distributed Kubernetes or on‑premises environments
• Experience securing large data platforms, object storage, databases, or data‑intensive systems
• Knowledge of AI/machine learning security, e.g., protecting AI endpoints, training data, models, ML pipelines, or AI supply chains
• Experience with highly secured, on‑premises, edge, or intermittently disconnected infrastructures

A solid foundation and practical implementation experience are essential for this role. Additional specialized knowledge is expressly not a requirement. Stärken und Erfahrungen zählen bei Rheinmetall, auch wenn vielleicht nicht alle aufgeführten Anforderungen vollständig erfüllt sind. Wir freuen uns auf Bewerber (m/w/d), die Lust haben, etwas zu bewegen und Verantwortung zu übernehmen. Wir legen Wert auf Individualität und Chancengleichheit. Schwerbehinderte Bewerber (m/w/d) werden bei gleicher Eignung besonders berücksichtigt.

WHAT WE OFFER YOU

• Company pension scheme
• Share purchase programme
• 30 days of holiday
• Access to corporate benefits
• Deutschlandticket
• Relocation support
• Mobile working
• VIVA family service
• Individual and diverse internal and external development opportunities, including at the Rheinmetall Academy
• Professional induction process supported by digital onboarding

CONTACT INFORMATION

Contact Person: Ms Özge Demirkaya