Senior Platform Security Engineer - AI Resilience & Security Enhancements (Contract)

Jobgether; Deutschland; Hybrid; EUR 83,000 - 152,000; Full time

Benefits offered by this job

Remote work after onboarding

Job summary

Jobgether is seeking a Senior Platform Security Engineer – AI Resilience & Security Enhancements (Contract) based in Germany to strengthen security across AI-enabled engineering workflows and cloud infrastructure. This hands-on role focuses on designing and implementing practical security controls, including autonomous AI agent safety, secure software delivery, and robust SBOM practices.

You will work with platform, engineering, and security teams to deliver measurable improvements to production

Qualifications

• Strong hands-on experience in Platform Engineering, DevOps, SRE, DevSecOps, or Platform Security with solid security fundamentals.
• Demonstrated experience designing and implementing security controls directly, not just reviews or reports.
• Strong understanding of CI/CD pipelines and integrating security into developer workflows.
• Knowledge of software supply chain security, dependencies, provenance, signing, and SBOMs.
• Understanding IAM, RBAC, and least-privilege principles.
• Practical experience with container security and Kubernetes.

Responsibilities

• Design, evaluate, and implement controls for secure AI agent execution, including policy enforcement, permissions, sandboxing, and auditability.
• Integrate security checks into CI/CD pipelines and PR workflows to catch issues before merge.
• Evaluate security tools and AI-assisted code security approaches, assessing accuracy and usability.
• Strengthen production access controls with least-privilege permissions and audit trails.
• Adapt tools to support secure production access and controlled environments.
• Improve CI/CD and software supply chain security with secure builds, SBOMs, and policy enforcement.
• Develop security automation and guardrails for adoption by engineering teams.
• Collaborate with software engineers on design, prototyping, and integration of security improvements.
• Contribute to broader security engineering initiatives with specialist teams.
• Produce technical docs and handover materials for long-term ownership.
• Deliver changes with low-risk implementation while preserving availability.

Skills

Platform Engineering

DevOps

SRE

DevSecOps

IAM

RBAC

CI/CD pipelines

Container security

Kubernetes

Go

Python

Security tooling

Automation

Tools

Terraform

AWS

GCP

Job description

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Senior Platform Security Engineer – AI Resilience & Security Enhancements (Contract) based in Germany.

In this hands‑on contract role, you will strengthen the security and resilience of a modern engineering platform, with a particular focus on AI-enabled workflows and secure software delivery. You will work closely with platform, engineering, and security teams to design, prototype, and implement practical security controls. Your work will span secure autonomous agent execution, CI/CD security, production access management, container security, and software supply chain integrity. You will turn security requirements into reliable, maintainable tooling and workflows that developers can use in their day‑to‑day work. The role combines technical problem-solving, automation, and close collaboration with engineers to deliver measurable improvements to production systems. You will help improve security without compromising service availability or engineering productivity.

Accountabilities

• Design, evaluate, and implement controls for secure autonomous AI agent execution, including policy enforcement, permissions, sandboxing, execution isolation, and auditability.

• Integrate security checks into CI/CD pipelines and pull request workflows to identify vulnerable or unsafe code changes before they are merged.

• Evaluate conventional security tools and AI‑assisted code security approaches, assessing detection accuracy, false positives, potential bypasses, and developer usability.

• Strengthen production access controls through least‑privilege permissions, secure privileged‑access pathways, session controls, and comprehensive audit trails.

• Adapt engineering tools and workflows to support secure, controlled access to production environments.

• Improve CI/CD and software supply chain security through secure builds, dependency and container scanning, provenance, artifact signing, software bills of materials (SBOMs), and policy enforcement.

• Develop practical security automation and platform guardrails that engineering teams can adopt, operate, and maintain.

• Collaborate directly with software engineers on technical design, prototyping, implementation, and the integration of security improvements into production systems.

• Contribute to broader security engineering initiatives, partnering with specialist teams when deeper domain expertise is required.

• Produce clear technical documentation, implementation guidance, and handover materials to support long‑term ownership.

• Deliver changes through structured, low‑risk implementation practices while preserving service availability and operational stability.

Requirements

• Strong hands‑on experience in Platform Engineering, DevOps, Site Reliability Engineering (SRE), DevSecOps, or Platform Security, supported by solid security fundamentals.

• Demonstrated experience designing and implementing security controls directly, rather than focusing solely on reviews, assessments, or reporting findings.

• Strong understanding of CI/CD pipelines, modern software delivery practices, and integrating security into developer workflows.

• Good knowledge of software supply chain security, including dependency management, secure builds, provenance, artifact signing, and vulnerability management.

• Understanding of identity and access management (IAM), role‑based access control (RBAC), and least‑privilege principles.

• Practical experience with container security and working knowledge of Kubernetes.

• Ability to write automation, scripts, or security tooling in a programming language; Go or Python experience is useful, with a willingness to work in Go where required.

• Experience collaborating with engineers to deliver practical security enhancements in production environments.

• Strong communication, technical documentation, and problem‑solving skills, with the ability to explain security decisions and work effectively across teams.

Desirable experience includes:

• Terraform or other Infrastructure as Code (IaC) tools.

• Public cloud platforms such as AWS or Google Cloud Platform (GCP).

• Security automation, policy‑as‑code, or automated policy enforcement.

• Container and runtime isolation, sandboxing, or related execution security controls.

• Securing AI agents or other AI‑enabled engineering tools, including using large language models (LLMs) for security analysis or automation.

• Threat modelling and security design practices.

• Mutual TLS (mTLS), public key infrastructure (PKI), cryptography, or key management.

• Working in regulated industries, financial services, or other business‑critical environments.

Relevant technical environment:

Go, Python, CI/CD, Kubernetes, Terraform, AWS, GCP, IAM, RBAC, software supply chain security, security policy automation, and AI security controls.

Benefits

• Contract‑based engagement focused on a high‑impact security and resilience programme.

• Hands‑on ownership of security controls across AI‑enabled engineering workflows, cloud infrastructure, and software delivery.

• Close collaboration with experienced engineering, platform, and security specialists.

• Opportunity to shape practical security tooling, automation, and secure engineering practices in a business‑critical environment.

• Remote working arrangement following an initial in‑person office visit to collect the equipment required for the role.

• Opportunity to work on modern technologies spanning AI security, cloud‑native platforms, CI/CD, and software supply chain protection.