Staff Engineer - Policy as Code (m/f/d)

SoSafe; Köln; Vor Ort; EUR 60.000 - 80.000; Vollzeit

Zusammenfassung

A leading human risk management provider is seeking a skilled engineer to lead the design and implementation of security processes. Ideal candidates should have professional experience in DevOps, strong programming skills, and a genuine interest in security. The position offers flexible hours, wellness support, and a vibrant team culture that values innovation and collaboration.

Leistungen

Flexible hours

33 vacation days

Corporate discounts

Referral bonuses

Dog-friendly office

Qualifikationen

• Genuine interest in security concepts and applying engineering skills.
• Professional experience in DevOps or similar roles supporting SaaS products.

Aufgaben

• Lead design, implement, and maintain policy-as-code and process automation.
• Build and integrate pipelines connecting product and security data.
• Automate checks, evidence collection, and reporting.

Kenntnisse

DevOps experience

Data engineering

Strong programming skills in Python or Go

Knowledge of AWS

Experience with Kubernetes

Automation experience

Holistic system thinking

Tools

Terraform

Datadog

Git/GitHub

Jobbeschreibung

Overview

SoSafe has the ambition to become the leading human risk management provider in Europe. Our award-winning awareness platform triggers behavioural change by providing effective and engaging training and simulations on cybersecurity and data protection. Cybercrime is predicted to cost the world $10.5 trillion annually by 2025 - we invite you to be part of the solution!

Responsibilities

• Lead design, implement, and maintain policy-as-code, tests, and process automation that make security controls measurable and verifiable
• Build and integrate pipelines that connect product, business, compliance and security data into shared systems
• Improve and simplify cross-team processes by automating recurring checks, evidence collection, and reporting
• Integrate your solutions with existing workflows such as Security Operations and Security Observability
• Help define and evolve a consistent internal data model for tracking security posture and control health
• Contribute to or head open-sourcing selected components of our work to aid transparency and reusability
• Participate in our in-hours triage rotation to stay close to operational challenges and feedback loops
• Collaborate with other teams on wider architectural patterns and best practices for securing multi-tenant SaaS applications

What makes you a great fit

• Genuine interest in learning security concepts and applying engineering know-how to improve how security works in practice
• Professional experience in DevOps, IT Engineer, data engineering, or similar roles supporting SaaS products
• Strong programming experience in a modern language such as Python or Go (we primarily work in TypeScript)
• Some knowledge of AWS services and tools such as Kubernetes, Terraform, Datadog, and Git/GitHub workflows
• Experience designing or improving cross-team processes through automation
• Ability to think holistically about systems, data, and user needs - and turn that into working, maintainable solutions

Nice to have

• Professional experience working with or within a security team is a plus, but not required
• Background in data management, pipelines, or internal tooling
• Experience using AI tools creatively to improve efficiency and simplify work

What we offer

• Work/Life balance: Flexible hours, 33 vacation days
• Wellbeing and financial support: Access to Open Up, corporate discounts
• Connection & community: Virtual events, collaborative team activities, and opportunities for local meet-ups
• And the list goes on: Tech equipment, referral bonuses, dog-friendly HQ

Perks and benefits listed above are for full-time employees and may vary slightly by office location. These are just a sample — you\'ll learn more during the interview process.

About Us

At SoSafe, we’re on a mission to make the digital world safer by addressing the human factor in cybersecurity. As one of the fastest-growing security awareness scale-ups worldwide, we leverage behavioural science and data-driven learning to empower people against cyber threats. Our Human Risk Management approach helps organisations turn their employees into their strongest line of defence.

Backed by leading VCs like Highland Europe and Global Founders Capital, we’re rapidly expanding across the globe. We’re looking for team players who want to drive meaningful change in cybersecurity, take ownership of their work, and grow with us.

If you thrive in a vibrant, purpose-driven environment that values innovation, diversity, and collaboration, then this is the place for you!