DevSecOps (m/f/d)

Yepoda; Berlin; Hybrid; EUR 60.000 - 85.000; Vollzeit

Zusammenfassung

A beauty start-up in Berlin is looking for a DevSecOps professional to enhance their cloud security and system integrations. The role involves designing secure infrastructure on Google Cloud Platform, establishing security controls, and ensuring GDPR compliance. The ideal candidate possesses strong experience in DevOps, security practices, and integrating business systems. This position offers a dynamic work environment with opportunities for growth and a hybrid work model.

Leistungen

Employee Discounts

Urban Sports membership

Free drinks and snacks

Dog-friendly office

Qualifikationen

• 3-5 years of hands-on experience in DevOps or DevSecOps roles.
• Strong expertise with Google Cloud Platform services.
• Proven experience implementing infrastructure using Terraform.

Aufgaben

• Design and implement secure cloud infrastructure.
• Build and maintain integrations between core business systems.
• Conduct security audits and implement remediation measures.

Kenntnisse

Google Cloud Platform services

Terraform

GDPR requirements

Containerization technologies

Scripting and automation

CI/CD concepts

Tools

Docker

Kubernetes

Oracle NetSuite

Shopify

Jobbeschreibung

About Yepoda

At Yepoda, Korean effectiveness meets sustainable solutions: our mindfully produced skincare products are made with love in Korea. Our mission is to bring the best beauty innovations from Korea straight to Europe – without ever compromising on our values, quality and sustainability. All our products are made with the best natural and active ingredients, are vegan and cruelty‑free. We aim to make the K‑Beauty routine easy, effective, and fun.

We are a beauty start‑up founded in 2020 and located in the heart of Berlin. Our team is composed of over 100 brilliant human beings who came from all over the world to write Yepoda’s story actively.

We are looking for a DevSecOps to join our growing team at Yepoda. In this role, you will play a key role in embedding security, compliance, and reliability into our cloud infrastructure and system integrations.

Your Tasks

• Design and implement secure cloud infrastructure on Google Cloud Platform using Terraform and Infrastructure as Code principles

• Build and maintain integrations between core business systems including Shopify, Oracle NetSuite, and various third‑party tools

• Establish and enforce security controls, IAM policies, and role‑based access management across all cloud resources

• Implement GDPR‑compliant data handling practices and PII protection mechanisms throughout the infrastructure

• Set up comprehensive monitoring, logging, and alerting systems to maintain security posture and operational visibility

• Create and maintain CI/CD pipelines with integrated security scanning and compliance validation

• Document infrastructure architecture, security policies, and standard operating procedures

• Conduct security audits and implement remediation measures to maintain compliance standards

Your Profile

• 3-5 years of hands‑on experience in DevOps or DevSecOps roles

• Strong expertise with Google Cloud Platform services (Compute Engine, Cloud Storage, BigQuery, IAM, VPC, Security Command Center)

• Proven experience implementing infrastructure using Terraform with version control and modular design

• Direct experience working with Oracle NetSuite and Shopify platforms, APIs, and integration patterns

• Background working at consumer/D2C/B2C companies with exposure to customer data and e‑commerce operations

• Deep understanding of GDPR requirements and practical experience implementing data privacy controls and PII handling

• Solid knowledge of security best practices including secrets management, encryption, network security, and zero‑trust principles

• Experience with containerization technologies (Docker, Kubernetes)

• Proficiency in scripting and automation (Python, Bash, or similar)

• Strong understanding of CI/CD concepts and tools (Cloud Build, GitHub Actions, or similar)

• Excellent problem‑solving skills and ability to work independently

• Strong communication skills in English (written and verbal)

Nice to have

• Google Cloud Professional certifications (Professional Cloud Architect, Professional Cloud Security Engineer, or Professional Cloud Engineer)

• Experience with n8n, Zapier, Make, or other workflow automation platforms

• Experience with additional security tools (vulnerability scanners, SIEM, IDS/IPS)

• Familiarity with compliance frameworks such as SOC 2, ISO 27001, or similar standards

• Experience with secrets management solutions (Google Secret Manager, HashiCorp Vault)

• Experience with disaster recovery planning and business continuity

What We Offer

• Dynamic Environment: The opportunity to work in a start‑up environment surrounded by a passionate and dedicated team.

• Accelerate Your Career: Take on responsibility from day 1, with room for professional growth and advancement as the company continues to expand.

• Inspiring Workspace: Located in the heart of Berlin's Prenzlauer Berg, a dog‑friendly office, with free drinks and snacks.

• Hybrid Working: We understand that sometimes you get more stuff done from home and need a change of scenery.

• We Value Diversity: We seek to build an inclusive workplace that welcomes people from all different backgrounds. A welcoming, international, dedicated team with flat hierarchies and trust by default.

• Employee Discounts: You’ll get to enjoy the Yepoda products at a discount and share it with friends and family to keep your glow going!

• Unique add‑ons: Enjoy an Urban Sports membership package to help you stay active and healthy.

Would you like to be part of the team? Then we'd love to hear from you! 🫰✨

Make sure to apply by clicking on the “Apply for this job” button below. Please upload your CV and Cover Letter in English language. Our Talent Acquisition team will review your application and get back to you as soon as possible.

At Yepoda we are dedicated to providing equal employment opportunities to all individuals, regardless of race, color, ethnicity, ancestry, religion, national origin, citizenship, gender, gender identity or expression, sexual orientation, age, marital status, parental status, disability, or any other status protected by applicable law.