DevSecOps Engineer (all genders)

XIBIX Solutions GmbH; Remote; EUR 70.000 - 90.000; Vollzeit

Zusammenfassung

A technology company in Germany is seeking a skilled DevSecOps Engineer to design and enhance secure cloud solutions. The role requires more than 5 years of experience in DevSecOps, with expertise in cloud security and a solid grasp of security best practices. Candidates must be fluent in English and German, with strong communication skills to collaborate effectively. The company promotes a flexible work environment, offering remote work options and personal development opportunities.

Leistungen

Comprehensive onboarding

Remote work option

Work-life balance

Flexible working hours

Professional development opportunities

Choice of hardware

Qualifikationen

• At least 5 years of professional experience in DevSecOps and Application Security.
• Strong understanding of cloud architectures and software development processes.
• Experience with integrating SAST and DAST into CI/CD pipelines.

Aufgaben

• Design and develop secure cloud solutions in agile DevSecOps environments.
• Integrate and maintain SAST and DAST solutions within CI/CD pipelines.
• Advise clients on effective cloud security services.

Kenntnisse

DevSecOps

Cloud Security

Application Security

Automation

Collaboration skills

Fluent English

Fluent German

Ausbildung

Degree in Computer Science or comparable qualification

Tools

GitHub

Azure DevOps

GitLab

Rust

Terraform

Jobbeschreibung

Read job description in: English EN German

Your Career

As a DevSecOps Engineer, you will design, build, and continuously improve secure cloud and platform solutions following modern DevSecOps principles. You will act as a key interface between development, operations, and security, ensuring that security is embedded throughout the entire software delivery lifecycle.

Your responsibilities

• Design and develop modern, secure cloud and platform solutions in agile DevSecOps environments
• Build automations and implement custom security tooling for CI/CD pipelines
• Create reusable CI/CD security components and templates (GitHub, Azure DevOps, GitLab)
• Integrate and maintain SAST and DAST solutions within CI/CD pipelines
• Advise clients on the effective use of cloud security services, balancing effort, cost, maintenance, risk, and compliance
• Identify common attack vectors and proactively mitigate security risks across applications and infrastructure
• Act as a security advocate within engineering teams and support secure‑by‑design approaches

Your profile

• Successfully completed degree in (Business) Computer Science or a comparable qualification
• At least 5 years of professional experience in DevSecOps, Application Security, and Cloud/Infrastructure environments
• Strong understanding of cloud architectures, software development processes, and security best practices
• Hands‑on experience integrating SAST and DAST into CI/CD pipelines, including building reusable security templates
• Solid knowledge of common attack vectors, especially OWASP Top 10 vulnerabilities
• Programming experience for automation and custom tooling, ideally in Rust (alternatively Go, Python, C#, Java, or TypeScript)
• Basic experience with GitHub, Azure DevOps, and/or GitLab
• Structured, reliable working style with strong communication and collaboration skills
• Fluent English & German / Portuguese (depending on Location)

NICE TO HAVE

• Knowledge of Kubernetes and serverless security
• Experience with Policy‑as‑Code (OPA/Rego, Kyverno) and Infrastructure as Code (Terraform, Bicep)
• Experience with monitoring, SIEM, and cloud security services (e.g. Azure Monitor, Microsoft Sentinel, Dynatrace, Datadog)

Why us?

• Comprehensive onboarding and individual mentoring.
• Remote work option.
• Work‑life balance and flexible working hours.
• Personal and professional development opportunities.
• Modern workplace and pleasant working atmosphere with close collaboration.
• Exciting and challenging customer projects as well as diverse tasks.
• Appreciative work environment with a positive error culture.
• Free choice of hardware between Mac and Windows.