Security Engineer - DevSecOps & SDLC Security (f/m/d)

Allianz Global Investors GmbH; Frankfurt; Hybrid; EUR 75.000 - 95.000; Vollzeit

Zusammenfassung

A top-tier asset management firm in Frankfurt is seeking a Security Engineer specializing in DevSecOps and SDLC Security. Candidates should have over five years' experience in security and cloud environments, with a strong background in implementing security best practices across development workflows. This role offers a supportive and flexible work environment, with opportunities for personal and professional growth.

Leistungen

Flexible work arrangements

Company pension plans

Career opportunities within Allianz Group

Comprehensive learning and development offerings

Qualifikationen

• 5+ years of experience in SDLC security, application security, or DevSecOps.
• Hands-on experience with CI/CD pipelines, GitHub, and JFrog.
• Strong knowledge of Terraform Cloud and cloud security principles.

Aufgaben

• Implement security controls across SDLC and infrastructure layers.
• Evaluate security tools for CI/CD integration.
• Advise development teams on secure tool usage.

Kenntnisse

SDLC security

CI/CD pipelines

GitHub

Terraform Cloud

Bicep

Ansible

cloud security principles

Open Policy Agent

CIS Benchmarks

English fluency

Ausbildung

Degree in Information Technology or related field

Jobbeschreibung

Overview

Security Engineer - DevSecOps & SDLC Security (f / m / d)

Join us. Let’s care for tomorrow.

At Allianz Global Investors we foster a culture of professionalism, fulfilment, and an inclusive working environment. Do you want to be part of a leading active asset management company? Then join us now!

This position is part of AllianzGI’s Development, Test & Transformation (DTT) team, which leads the delivery of secure, resilient, and scalable technology across a global hybrid cloud environment. The role centers on integrating security throughout the software development lifecycle (SDLC), cloud-native infrastructure, and automation platforms. Core responsibilities include implementing robust technical controls, evaluating and integrating security tools into developer workflows, advising engineering teams and security champions, and ensuring alignment with regulatory and internal compliance frameworks. The position places strong emphasis on infrastructure-as-code practices and AI-driven enhancements to developer experience, while also playing a key role in audit preparedness and cross-functional collaboration.

This role is based in our Frankfurt or Munich office.

What you will do

• Implement and oversee security controls across SDLC and infrastructure layers
• Test-drive and evaluate security tools for integration into CI / CD pipelines and developer workflows
• Advise development teams and security champions on the secure use of provided tools and platforms
• Define and enforce secure SDLC practices aligned with DORA, KAIT, BAIT, and AllianzGI’s internal frameworks
• Apply security best practices to cloud-native infrastructure, with emphasis on Microsoft’s Well-Architected Framework
• Secure and govern Infrastructure as Code (IaC) using Terraform Cloud, Bicep, and Ansible
• Implement policy-as-code using Open Policy Agent (OPA) across infrastructure and pipelines
• Automate security controls, evidence generation, and release promotion workflows
• Champion security-by-design principles across architecture, development, and operations
• Collaborate with governance, application, and infrastructure teams to map technologies to compliance controls
• Contribute to the Security Champion Community of Practice (CoP)
• Apply CIS Benchmarks to harden systems and validate configurations
• Support compliance dashboards and DORA metrics implementation in our IDP
• Optionally contribute to areas such as Kubernetes, Azure role assignments, VM usage, and private endpoint architecture
• Serve as a sparring partner for internal and external auditors, working closely with internal process and application owners to ensure alignment of technical controls with audit and compliance expectations.

What you bring

• 5+ years of experience in SDLC security, application security, or DevSecOps
• Hands-on experience with CI / CD pipelines, GitHub, and JFrog
• Strong knowledge of Terraform Cloud, Bicep, Ansible, and cloud security principles
• Familiarity with Open Policy Agent (OPA), Microsoft’s Well-Architected Framework, and CIS Benchmarks
• Experience with security testing tools and vulnerability management
• Proven ability to operate effectively in regulated environments (DORA, KAIT, BAIT)
• Excellent communication skills across technical and business stakeholders
• Fluent in English; additional languages are a plus.

Preferred

• Degree in Information Technology or a related field
• Certifications such as CSSLP, GCSA, AZ-500, CISSP, CISM, or CISA
• Experience with internal developer platforms (IDPs) and platform engineering
• Exposure to Agile environments and enterprise transformation programs
• Familiarity with AI-enhanced developer workflows and their security implications.

What we offer

• We empower our employees by ensuring flexible work arrangements that maintain a balance between performance, productivity, career development and personal priorities (e.g., hybrid model / flexible working hours)
• Securing your future : Access to company pension / savings plans
• Shared success : Company share purchasing plan
• Support for what matters : Mental health and wellbeing programs
• Investments in your career : Career opportunities within the entire Allianz Group
• Investments in your skills : Comprehensive learning and development offerings, including certifications and professional qualifications
• and so much more!

About Allianz Global Investors

Allianz Global Investors is a leading global active asset manager.

We invest for the long term and want to create value for clients every step of the way. We do this by being active – in how we partner with clients and anticipate their needs, and build solutions based on capabilities across public and private markets. Our focus on enhancing our clients’ assets leads naturally to a commitment to sustainability for positive change. Our goal is to enhance the investment experience for clients, whatever their location or goals.

Putting our clients' needs first, behaving in a transparent way and treating people fairly means acting with integrity. We encourage a collegial culture, that supports individual responsibility. We invest in the development of our employees to maximize the power of innovation.

We at Allianz believe in a diverse and inclusive workforce, we are committed to the principles of Equal Employment Opportunity and to helping applicants with any disabilities. We encourage you to bring your whole self to work, no matter where you are from, what you look like, who you love or what you believe in. We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, disability or sexual orientation. Great to have you on board.

If you feel inspired to promote the active asset management experience, this is the place for you. Join our diverse, international, technology-enabled, and agile environment. Simply upload your CV in English to apply for this position! If you need support to navigate our websites or at any stage during your application, please send an email with your request to [e-mail]

71004 | IT & Tech Engineering | Professional | n.a. | Allianz Global Investors | Full-Time | Permanent