Senior Software Engineer (Platform, Security Focused)

casavi; München; Vor Ort; EUR 90.000 - 120.000; Vollzeit

Benefits dieser Stelle

Flexible working hours

Language courses & training budget

Team events

Health & Wellbeing program (GYM/WELL)

Childcare allowance & pension

Workation: EU travel allowed up to 60+

Zusammenfassung

casavi is seeking a Platform Engineer focused on Application Security to build and operate a secure, scalable foundation used by all product teams. You will own core features like Auth, i18n, feature flags, and the infrastructure that runs on AWS with Kubernetes, Terraform, Helm, ArgoCD, and GitLab CI/CD.

You will embed security across the SDLC, automate vulnerability scanning, manage secrets, and enforce guardrails so shipping securely becomes the path of least resistance.

Qualifikationen

• Several years of experience with TypeScript stack (Node.js, REST API, MySQL, MongoDB, Nest.js, React).
• Strong focus on Application Security with proven SDLC security practices.
• Experience with observability tooling like Prometheus and Grafana.
• Proficiency with AI-based tooling for internal automation.
• Deep understanding of cloud-native security and pipelines.
• Proven hands-on experience running production Kubernetes clusters and cloud infrastructure (AWS, Terraform, Helm, GitOps).
• Excellent communication skills and fluent English.

Aufgaben

• Work in Platform team to build and operate foundational platform used by all product teams.
• Own and evolve platform features, including Auth, I18n, Feature Flags, and infrastructure automation (Terraform, Helm, ArgoCD, GitLab CI/CD).
• Ensure application security through automated gates, regular security testing, and SDLC embedding.
• Implement automated vulnerability scanning, secure secrets management, and Policy-as-Code guardrails.
• Harden cloud environments with IAM, network policies, and security baselines.
• Collaborate with engineers and product teams to improve reliability, scalability, and developer experience.

Kenntnisse

TypeScript

Node.js

Nest.js

React

Python

Application Security

Observability

Prometheus Grafana

AI tooling

Kubernetes

AWS

Terraform

Helm

ArgoCD

GitLab CI/CD

Tools

Terraform

Helm

ArgoCD

GitLab CI

AWS

Jobbeschreibung

Responsibilities

• You are part of our dedicated Platform team, building and operating the foundation that every product team at casavi builds on
• With the team, you own and evolve our platform: from core product features every team builds on, like Auth, I18n, Feature Flags, and so on, to infrastructure, with our AWS setup, Kubernetes clusters, GitOps workflows, and Infrastructure-as-Code (IaC), working with Terraform, Helm, ArgoCD, and GitLab CI/CD, while monitoring system health with Prometheus & Grafana
• Your main personal focus is Application Security: making sure our product stays robust and reliable in the face of modern growing security threats, via comprehensive automated quality gates, regular security testing being done as a practice, strong security standards embedded in the SDLC of our teams, and appropriate instrumentation of the AI Coding Assistant tooling our team is using
• You also bake security into our infrastructure, implementing automated vulnerability scanning, secure secrets management, and Policy-as-Code guardrails so that shipping securely is always the path of least resistance
• You harden our cloud environments, ensuring robust IAM configurations, network policies, and foundational security baselines are continuously enforced
• You collaborate closely with fellow engineers across the Platform team and with product teams, bringing your ideas to make our platform more reliable, scalable, and easy to build on

Qualifications

• You have several years of experience working with TypeScript (our tech stack includes Node.js, REST API, MySQL, MongoDB, Nest.js, React) and, ideally, also Python (our Python stack: Flask, FastAPI, MongoDB)
• You care about Application Security deeply and have a proven track record of establishing secure SDLC in software engineering teams
• Ideally, you have strong experience with observability tooling (Prometheus/Grafana) and monitoring production systems
• You are a power user of AI-based tools (GitHub Copilot, Claude Code, Codex, etc.), and you know how to use them to build lightweight internal tooling and automation safely and responsibly
• You live in Germany
• You are a strong communicator, and your English is at a very good level (>C1)
• You understand cloud-native security principles and have experience securing pipelines, container images, and infrastructure (e.g., using AWS Secrets Manager, Vault, Trivy, Snyk, or similar tooling)
• You have proven hands‑on experience running production Kubernetes clusters and managing cloud infrastructure. You know AWS, Terraform, Helm, GitOps (ideally ArgoCD), and CI/CD pipelines (ideally GitLab CI)
• You’d rather script and orchestrate an agentic workflow than stand up a heavyweight developer portal
• You have excellent analytical & problem‑solving skills and enjoy owning problems end‑to‑end, from root cause to fix

Benefits

• Variable working hours: Find the optimal way of working for you from our flexible working time models and our hybrid concept of office and mobile work
• Persona Development: Invest in yourself with online language courses and your own training budget for your professional and personal development
• Team Events: Get together with your colleagues at regular company and team events, such as our summer parties or year-end events
• Health & Wellbeing: Keep fit with a discounted EGYM Wellpass membership or by using a JobRad with tax benefits of up to 40%
• Social employer benefits: Receive a childcare allowance to improve the compatibility of family and career and benefit from an above-average subsidized company pension plan
• Workation: Home office from somewhere else: Work for up to 60 days anywhere within the EU and combine the feeling of vacation with your work