DevSecOps Engineer

Revizto; Deutschland; On-site; EUR 90,000 - 130,000; Full time

Job summary

Revizto is seeking a DevSecOps Engineer in Germany to lead security-first infrastructure across AWS and multi-cloud. You will implement secure IaC, threat modeling, and robust incident response in a fast-paced construction-tech environment.

Responsibilities include building secure CI/CD pipelines, container security, and policy enforcement while aligning with CIS benchmarks and secure software supply chains.

Qualifications

• Security automation scripting in Python/Go/Bash.
• Experience with threat modeling and security architecture review.
• Ability to manage incident response and security investigations.

Responsibilities

• Design secure cloud infra using Terraform/Terragrunt with CIS benchmarks.
• Build vulnerability management workflows across cloud and endpoints.
• Deploy and tune log aggregation/detection for automated incident response.
• Design network segmentation for containerized/cloud-native environments.
• Implement secure Kubernetes bootstrapping and policy enforcement.
• Maintain container runtime security and image scanning policies.
• Design secure CI/CD pipelines with SAST/DAST and security gates.

Skills

Python

Go

Bash

Threat modeling

Incident response

Tools

Falco

OPA Gatekeeper

Prisma Cloud

Istio

Linkerd

Job description

Revizto enables the people behind the world's most important structures to do their best work. We connect architects, engineers, contractors, and owners in one shared 2D/3D environment to help deliver complex projects on time and on budget. From airports and hospitals to data centers and large-scale infrastructure, Revizto supports industry leaders in reducing risk, improving collaboration, and delivering better project outcomes. Built on a gaming engine, Revizto is designed to handle the scale and complexity of modern construction projects while remaining fast, reliable, and accessible across devices and environments - whether teams are in the office or on site.

Key Responsibilities & Requirements

Infrastructure Security & Compliance

• Design and implement secure cloud infrastructure using Terraform/Terragrunt, following security best practices and CIS benchmark compliance
• Build vulnerability management workflows: scanning, triage, and remediation across cloud and endpoint estate
• Deploy and tune log-aggregation/detection infrastructure for automated incident response
• Design network segmentation for containerized and cloud-native environments.

Kubernetes & Container Security

• Design secure Kubernetes cluster bootstrapping, node hardening, and control-plane configuration
• Implement Pod Security Standards, network policies, and RBAC via IaC
• Establish golden-image programs and container vulnerability scanning/policy enforcement for image registries
• Maintain hands-on experience with container runtime security and registry-integrated scanning

CI/CD & Source Code Security

• Design secure CI/CD pipeline infrastructure with SAST/DAST integration and security gates
• Implement organization-wide GitHub security policies: branch protection, secret scanning, and dependency management
• Apply knowledge of supply-chain security controls and automated security testing frameworks

Secrets, Identity & Endpoint Hardening

• Manage critical identity infrastructure and enforce rigorous hardening standards across all endpoints
• Implement secrets management infrastructure (e.g., HashiCorp Vault) for application and infrastructure credentials
• Design IAM across cloud environments and support Zero Trust initiatives
• Harden databases (MySQL, PostgreSQL, Redis) against encryption and access-control best practices
• Build backup/DR infrastructure with robust encryption and security controls

Core Skills

• Technical mastery and a proactive troubleshooting mindset are essential for success in this role.
• Proficiency in security automation scripting (Python, Go, or Bash)
• Experience in threat modeling and security architecture review
• Comfortable owning infrastructure troubleshooting through to incident response

Preferred Qualifications

• Security certifications such as AWS Security Specialty, CISSP, CCSP, or Azure Security Engineer
• Experience with container security platforms (e.g., Falco, OPA Gatekeeper, Prisma Cloud) and service mesh security (Istio/Linkerd)
• Familiarity with SOAR/security automation platforms and infrastructure penetration testing
• Familiarity with GitOps and secure software supply-chain methodologies

Position Overview DevSecOps Engineer responsible for security-first infrastructure architecture, threat detection, and compliance across our multi-cloud environment, with primary emphasis on AWS. Alibaba Cloud and GCP are expansion targets - current Terraform/Terragrunt modules and CIS benchmark tooling are AWS-only; this role will help build out equivalent coverage for the other platforms. Owns secure IaC delivery, Kubernetes/container security, and CI/CD supply-chain security.

Why Join Us Recognised as one of Switzerland's Best Managed Companies by Deloitte for three consecutive years from 2024 through Company-wide trips, including Armenia in 2023 and Switzerland in 2025, with more to come A flexible, employee-focused culture An innovative and collaborative team environment Great working conditions designed to support your best work

We can only accept applications from candidates based in Germany, France or the UK.