Senior DevSecOps Engineer: Cloud Security & Infra Lead

Toogoodtogo; København; On-site; DKK 900,000 - 1,300,000; Full time

Benefits offered by this job

Global social-impact company

International team

Work-life balance emphasis

Autonomous environment

1,200+ colleagues across 17 countries

Job summary

Too Good To Go is seeking a Senior DevSecOps Engineer to join our Copenhagen infrastructure team. You will bridge cloud engineering and information security, owning our AWS security posture and embedding shift-left security into deployment pipelines to serve millions of users.

You will lead security tooling, implement IaC guardrails with OpenTofu, and collaborate with engineering to balance velocity with risk management across multi-region environments.

Qualifications

• 4+ years in cloud security and DevSecOps with AWS focus.
• In-depth AWS security architecture knowledge and multi-account governance.
• OpenTofu/Terraform and security scanners in CI/CD pipelines.
• Experience with CIS AWS Benchmarks, NIST CSF or SOC 2 controls.
• Go or Python for automation and tooling integrations.
• Kubernetes (EKS) security, network policies and secrets handling.

Responsibilities

• Own and improve cloud security posture across multi-region environments.
• Integrate vulnerability scanning and policy-as-code in CI/CD pipelines.
• Develop and enforce IaC guardrails with least-privilege access patterns.
• Collaborate with security and engineering to prioritize remediation.
• Map controls to benchmark frameworks and support audit readiness.

Skills

DevSecOps focus

AWS security

OpenTofu/Terraform

Policy-as-Code

Go/Python

Kubernetes security

Tools

OpenTofu

Terraform

Checkov

tfsec

OPA

Job description

Too Good To Go is seeking a Senior DevSecOps Engineer to join our Copenhagen infrastructure team. You will bridge cloud engineering and information security, owning our AWS security posture and embedding shift-left security into deployment pipelines to serve millions of users.

You will lead security tooling, implement IaC guardrails with OpenTofu, and collaborate with engineering to balance velocity with risk management across multi-region environments.