DevSecOps Engineer (f/m/d)

Enpal; Deutschland; Hybrid; EUR 60.000 - 90.000; Vollzeit

Zusammenfassung

Join a pioneering green energy company on a mission to revolutionize solar power accessibility. As a DevSecOps Engineer, you will play a key role in integrating security throughout our cloud-native software development lifecycle. You'll work in a dynamic environment where innovation thrives, collaborating closely with teams to ensure robust security measures. This is your chance to contribute to a sustainable future while advancing your career in a supportive and empowering workplace. Be part of a diverse team that values initiative and creativity as we shape the energy transition together.

Leistungen

Modern office with amenities

Hybrid working model

Diverse team with 65+ nationalities

Team events and activities

Feedback culture

Onboarding with the founder

Lunch & Learn sessions

Ping-pong table and yoga corner

Roof terrace

Stocked drinks fridges

Qualifikationen

• Experience embedding security throughout the software development lifecycle.
• Hands-on experience with security tooling and automation.
• Familiarity with information security frameworks and standards.

Aufgaben

• Automate security integration in the software development cycle.
• Monitor security of applications and IT landscape.
• Collaborate with architects to enforce security policies.

Kenntnisse

Security-first mindset

Cloud computing (Azure)

CI/CD

Infrastructure as Code (Terraform)

Kubernetes

OWASP principles

English communication

Agile and lean values

Tools

SAST

SCA

DAST

CNAPP

CWPP

Azure SQL

MongoDB

C#

Node.js

Datadog

Jobbeschreibung

Full-time

Berlin

from today

Our goal is a solar power system on every roof, a storage unit in every house, and an e-car in every garage. How are we achieving this? Enpal makes solar easy: we rent out solar power systems, heat pumps, electricity storage, and wallboxes at an all-inclusive rate, supplemented by a low-cost green electricity tariff, and intelligently networked into an integrated overall solution.

We are just at the beginning of our journey to becoming Europe's largest energy company. That's why we're looking for talented people to accompany us on this journey, leave their footprint, and celebrate successes together with us. At Enpal, you will find a dynamic working environment as well as the space to develop yourself personally and professionally and to use your strengths effectively.

As the first green unicorn in Germany and the fastest-growing energy company in Europe (FT1000 Ranking 2022 by Financial Times & Statista), we continue to advance our mission of green energy for everyone. Be part of this success story and change the world with us!

Your duties

As a DevSecOps Engineer, you will automate the integration of security in every phase of our cloud-native software development cycle. You will integrate application and infrastructure security into agile and DevOps processes and tools and will be responsible for proactive security controls. You will monitor the security of our applications and IT landscape in Microsoft Azure, identify security gaps, and react to security problems as soon as they arise. You collaborate with Security and Solution Architects to create and enforce organization-wide security policies.

We offer speed, agility, and steep career growth. Our vision to make sustainable solar energy available to everyone can only come to life through our customer and product-oriented view, and the cooperation between software development, product management, and lean, experiment-driven business development.

Join us to develop your professional skills, take part in the energy revolution, and let us take ownership of the sustainable change we want to see in the world together! We are looking forward to your application.

At Enpal, you would be:

• building secure solutions. We are serious about delivering incremental value in each iteration, and we celebrate when we improve people's experience with our solution, make an impact towards our climate goals. Adopting Shift-Left and Zero-Trust approaches
• adopting Shift-Left and Zero-Trust approaches. We emphasize proactive and continuous security measures, helping us stay ahead of potential threats and ensuring robust protection of assets, applications, and services.
• troubleshooting, identifying, and fixing problems. We are constantly improving the security of our applications and IT landscape and fixing issues as soon as they arise.
• improving overall security. We're about improving stability, availability, automating as much as we can; including load tests and vulnerability scans. We are constantly challenging and improving company-wide security, backup, and HA strategies.
• working on architecture & vision. We are fusing old and new technologies; cloud-native microservices, IoT applications, a Salesforce backbone, an event-driven architecture. This means we analyze new requirements critically to see which moving parts would have to change, explore opportunities to solve organization-spanning challenges with elegant and secure solutions.
• steering for empathy and understanding. Only when we comprehend what the market needs, we can create solutions that truly address underlying challenges. Ask critical questions and listen to operations, craftspeople, sales - there are so many stakeholders and users to get input from, and balancing their needs leads to the best solutions.

Your profile

• you have a security-first mindset, and appreciate developer experience as a close second
• you have hands-on experience embedding security throughout the entire software development lifecycle - from design and coding to integration and deployment
• you have extensive knowledge of cloud computing platforms; Azure is a huge plus.
• you have experience with security tooling and automation across domains like SAST, SCA, DAST, CNAPP, CWPP etc.
• you have experience securing various platforms/technologies including CI/CD, Infrastructure as Code (Terraform a plus), Kubernetes and other cloud-native systems.
• you have experience identifying and addressing security flaws in APIs and applications, with a solid understanding of OWASP principles
• your familiarity with Azure SQL, MongoDB, C#, Node.js, Datadog etc. is a plus
• you are familiar with information security frameworks, standards, and policies
• you communicate clearly in English, spoken and written. Crisp and concise ways of formulating your ideas and opinions. Knowledge of German is a plus.
• you are inspired by the energy transition and want to make a difference. We are one of the biggest players in the solar business and want to make this change with you.
• you want to participate in a company where empowerment and initiative are valued. We are looking for people who want to grow their personal skills and knowledge, take responsibility, steer, and influence for what they feel is right.
• agile and lean values are embodied by you. People over processes. Code over documentation. Reducing waste by building minimum viable products first, testing it with real users, growing and maintaining solutions as requirements evolve.

More information

• Work in Germany's first green unicorn and actively shape the solar energy revolution.
• The sun shines all over the world - at Enpal, you will find a highly motivated and diverse team with more than 65 different nationalities.
• Would you rather keep your pet company at home or your colleagues at the office? Even after the pandemic, we offer you a hybrid working model
• We fulfill every start-up cliché - in our modern office in Berlin-Friedrichshain, you'll find everything your heart desires, from a ping-pong table and yoga corner to a roof terrace and stocked drinks fridges.
• Your kick-start at Enpal - Get to know the company, your team colleagues, and our founder Mario on your onboarding day.
• Stay up to date - Whether it's company figures at our monthly all-hands meetings or how a photovoltaic system works at the Lunch & Learn, you'll always know exactly what's going on.
• Energy transition only works together - At Enpal, you can expect a legendary team spirit and unforgettable team events.
• No mistakes, no progress - We live a strong feedback culture and grow with your input, either personally or anonymously via our feedback tool Culture Amp.

Testimonials

Pepijn

Director Software Engineering

Empowerment and collaboration are necessary to create an impactful digital product. Having people from diverse backgrounds best enables us to build vibrant teams that tackle our complex engineering challenges. Different nationalities, genders, and lived experiences, highlight distinctive solutions and allow for holistic problem-solving approaches.

Sarah

Software Developer

Having joined Enpal's tech team almost a year ago, I felt warmly welcomed from the beginning. It's an inspiring environment where everyone can pick tasks they enjoy. I appreciate the freedom to voice disagreements and have constructive discussions to find the best solutions collaboratively. We encourage suggesting and driving solutions - not just creating new features but also maintaining software and managing tech debt.