Senior DevSecOps Engineer: Cloud Security & Infra

Too Good To Go; København; On-site; DKK 900,000 - 1,200,000; Full time

Job summary

Too Good To Go in Copenhagen is seeking a Senior DevSecOps Engineer to strengthen our globally scalable AWS-based infrastructure. You will own security tooling, drive compliance automation, and embed shift-left security into deployment pipelines used by millions of users and partners.

Join a cross-functional team in Copenhagen to implement policy-as-code, manage IAM, WAF, and security posture across multi-region environments while balancing delivery velocity with governance and safety.

Qualifications

• 4+ years of hands-on experience in cloud infrastructure with a heavy specialization in AWS cloud security, container security, and DevSecOps tooling.

Responsibilities

• Own and optimize AWS Security Hub, GuardDuty, IAM, and WAF configurations across multi-region environments.
• Integrate automated vulnerability scanning, container image checking, dependency auditing, and Policy-as-Code into CI/CD pipelines.
• Maintain and evolve OpenTofu codebase with embedded security guardrails and least-privilege access patterns.
• Triage and remediate reachability-based vulnerabilities and infrastructure misconfigurations without slowing delivery.
• Map infrastructure controls to CIS AWS Benchmarks, NIST CSF, and SOC 2 Type II criteria.

Skills

AWS Security

Cloud Security

OpenTofu/Terraform

CI/CD tooling

Go/Python

Kubernetes security

Tools

AWS

GitHub Actions

ArgoCD

Jenkins

OpenTofu

Checkov tfsec OPA

Job description

Too Good To Go in Copenhagen is seeking a Senior DevSecOps Engineer to strengthen our globally scalable AWS-based infrastructure. You will own security tooling, drive compliance automation, and embed shift-left security into deployment pipelines used by millions of users and partners.

Join a cross-functional team in Copenhagen to implement policy-as-code, manage IAM, WAF, and security posture across multi-region environments while balancing delivery velocity with governance and safety.