Senior Security and Compliance Engineer (m/f/d)

Codesphere; München; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

32 days paid time off

Job summary

Codesphere is seeking a Senior Security & Compliance Engineer (m/f/d) to own the security posture of our platform, including vulnerability management, incident response, and compliance with GDPR and ISO 27001.

You will lead security assessments, manage DAST/SAST tooling, and integrate security into CI/CD pipelines, enabling secure development across the stack.

Qualifications

• 5+ years in a security engineering or similar role, ideally in a cloud or SaaS environment.
• Hands-on experience with penetration testing, vulnerability management, and DAST/SAST tooling.
• Solid understanding of DevSecOps principles and CI/CD security integration.
• Familiarity with SIEM tools, incident response, and forensic analysis.
• Knowledge of GDPR, ISO 27001, and ideally BSI IT-Grundschutz.

Responsibilities

• Conduct security assessments, penetration testing, and vulnerability remediation with development teams.
• Manage security scanning tooling (DAST/SAST) and perform security code reviews.
• Design and implement security controls across the technology stack and enforce standards.
• Integrate security into CI/CD pipelines—Shift Left and DevSecOps in practice.
• Develop and maintain the Security Incident Response Plan; monitor logs and lead forensic analysis.
• Ensure compliance with GDPR, ISO 27001, and BSI IT-Grundschutz.

Skills

Penetration testing

Vulnerability management

DAST/SAST tooling

DevSecOps

SIEM

Forensic analysis

Job description

About Codesphere

Codesphere is a Virtual Cloud Provider from Germany building the future of sovereign cloud infrastructure. Our platform gives enterprises and governments full sovereignty without giving up modern cloud capability – a vision recently validated by a series of multi-million European government tenders.

Since our founding in Karlsruhe in 2020, we’ve expanded into an international team of 60+ experts. Based in Karlsruhe and Munich and backed by top-tier investors, we are chasing a bold vision.

We’re scaling fast and would love for you to join us and grow alongside us

About the role

Codesphere runs cloud infrastructure that enterprises and governments depend on – security is not an afterthought, it's a foundation. As a Senior Security & Compliance Engineer (m/f/d), you own the security posture of our platform: from vulnerability management and incident response to compliance frameworks and developer enablement.

What you'll drive

• You conduct security assessments, penetration testing, and vulnerability scanning – and drive remediation with development teams

• You manage security scanning tooling (DAST/SAST) and perform security code reviews

• You design and implement security controls across our full technology stack, defining and enforcing standards for development, infrastructure, and data

• You integrate security into our CI/CD pipelines and development processes – Shift Left and DevSecOps in practice, not just on paper

• You develop and maintain our Security Incident Response Plan, monitor security logs via SIEM, and lead forensic analysis when needed

• You ensure compliance with relevant standards and regulations – including GDPR and ISO 27001

What makes you a great fit

• 5+ years in a security engineering or similar role, ideally in a cloud or SaaS environment

• Hands-on experience with penetration testing, vulnerability management, and DAST/SAST tooling

• Solid understanding of DevSecOps principles and CI/CD security integration

• Familiarity with SIEM tools, incident response, and forensic analysis

• Knowledge of relevant compliance frameworks – GDPR, ISO 27001, and ideally BSI IT-Grundschutz

What's in it for you

• 32 days of paid time off – 30 regular vacation days plus Christmas Eve and New Year's Eve off