Senior DevSecOps Engineer (Cloud Security & Infrastructure)København, Hovedstaden, Denmark

Too Good To Go; København; On-site; DKK 950,000 - 1,550,000; Full time

Benefits offered by this job

Work-life balance

Autonomy

International team

Equal opportunity

Job summary

Too Good To Go in Copenhagen is seeking a Senior DevSecOps Engineer to build a secure, scalable infra used by millions of users and partners. You will lead cloud security initiatives, drive automation, and embed shift-left security into deployment pipelines.

You will bridge cloud engineering and information security, owning AWS posture, and guiding compliance automation across multi-region environments while collaborating with product teams to maintain velocity.

Qualifications

• 4+ years of hands-on cloud security and DevSecOps experience.
• Strong knowledge of AWS security architecture and multi-account governance.
• Experience with OpenTofu/Terraform and security scanners in CI/CD.
• Familiarity with CIS AWS Benchmarks, NIST CSF, SOC 2.
• Proficient in Go or Python for automation.

Responsibilities

• Own and optimize AWS security tooling and configurations across regions.
• Embed security into CI/CD pipelines with policy-as-code.
• Maintain and evolve IaC with security guardrails at build time.
• Triage and remediate infrastructure vulnerabilities with teams.
• Align controls with industry frameworks and support audits.

Skills

DevSecOps

AWS Security

Kubernetes Security

IaC

Policy-as-Code

Go/Python

Tools

OpenTofu

GitHub Actions

ArgoCD

Jenkins

Checkov

tfsec

OPA

AWS Security Hub

GuardDuty

Job description

Senior DevSecOps Engineer (Cloud Security & Infrastructure)
København, Hovedstaden, Denmark
ApplyAt Too Good To Go, we have an ambitious goal: to inspire and empower everyone to fight food waste together. 40% of all food produced in the world is wasted, contributing to 10% of global greenhouse gas emissions. We’re more than an app, we are a certified B Corporation working across 19 countries to drive change through our marketplace app, educational tools, legislative work, and logistics initiatives.

We’re growing fast: Our community of 118 million registered users and 246,000 active partners across 19 countries, have together already prevented 443+ million meals from going to waste - avoiding over 1.198.000 tonnes of CO2e!

Too Good To Go is looking for a new Senior DevOps Engineer to build and further enhance our highly scalable infrastructure by creating tooling, automating and improving reliability. You will be part of the infrastructure team working in our Copenhagen office.

Your mission will be building a secure and globally scalable infrastructure. What you help build will be used daily by our millions of users, our partners, and our internal business stakeholders.

We are looking for a new Senior DevSecOps Engineer to join our infrastructure team in Copenhagen. In this role, you will bridge cloud engineering and information security, owning our AWS security posture, driving compliance automation, and embedding shift-left security directly into our global deployment pipelines.

The role

• Cloud Security Leadership: Own and optimize AWS Security Hub, GuardDuty, IAM, and WAF configurations to maintain a robust defense posture across multi-region environments.
• Shift-Left Security Pipelines: Integrate automated vulnerability scanning, container image checking, dependency auditing, and Policy-as-Code directly into GitHub Actions and ArgoCD pipelines.
• Infrastructure as Code (IaC): Maintain and evolve our OpenTofu codebase with embedded security guardrails, ensuring least-privilege access patterns and encryption standards are enforced at build time.
• Threat & Vulnerability Remediation: Work alongside software engineering teams to prioritize, triage, and remediate reachability-based vulnerabilities and infrastructure misconfigurations without slowing down delivery velocity.
• Compliance & Framework Alignment: Partner with our Security team to map our infrastructure controls against industry benchmark frameworks (NIST CSF, CIS AWS Benchmarks) and support ongoing audit readiness.

Tech Stack

• Cloud & Compute: AWS (EKS, RDS Aurora, OpenSearch, Lambda, Redshift)
• IaC & Automation: OpenTofu, Docker, Kubernetes
• CI/CD & GitOps: GitHub Actions, ArgoCD, Jenkins
• Security & Governance: AWS Security Hub, GuardDuty, IAM, WAF, Container/Dependency Scanning (Aikido)
• Observability: Grafana, Prometheus, Mimir, Graylog

Requirements

• Proven DevSecOps/Cloud Security Focus: 4+ years of hands-on experience in cloud infrastructure with a heavy specialization in AWS cloud security, container security, and DevSecOps tooling.
• AWS Security Expertise: In-depth working knowledge of AWS security architecture, multi-account governance (AWS Organizations/Control Tower), IAM complex policies, KMS key management, and AWS Security Hub prioritization.
• IaC & Policy-as-Code: Strong proficiency in OpenTofu/Terraform and experience implementing static analysis/security scanners (e.g., Checkov, tfsec, OPA) within CI/CD pipelines.
• Security Framework Knowledge: Practical experience implementing controls aligned with CIS AWS Benchmarks, NIST CSF, or SOC 2 Type II Trust Services Criteria.
• Engineering Background: Solid proficiency in Go or Python for automation, custom tooling, and security API integrations.
• Kubernetes & Network Security: Experience securing EKS clusters, network policies, secrets management, and ingress controls for high-traffic mobile/web applications.

Our values

• We fight together: food waste is a big beast to fight. We can do it if we fight together as Waste Warriors with no ego. We believe in a #oneteam.
• We raise the bar: we always push for more. We work smart, smash barriers and elevate one another.
• We keep it simple: our ambitions are bold but our solutions are simple
• We build a legacy: we’re proud of the change we’re driving.
• We care: we always look out for each other. Caring is also about the way we do business. We do the right thing.

What We Have To Offer

• An opportunity to work in a global social-impact company and certified B Corporation! where you can see a real and tangible impact in your role.
• To be an integral member of our defined product teams. We are eager for you to make an impact and contribute to the product scope and development; Your insights are valuable, and we are here to listen.
• Work-life balance is important to us! Focus on the job to be done, not the hours spent, there is no need for overtime.On-call duty is not part of the job, but can be additionally agreed upon should you and your manager both wish it. We believe happy environments create happy employees.
• We trust in our employees and encourage an autonomous environment that provides several opportunities for employees to contribute, develop and take ownership of their work in a way that works for them.
• To be part of an international company, with over 1,200+ colleagues across 17 countries that are on the same important mission.
• An informal environment, working alongside a tech team of over 90 passionate people, we celebrate our differences and our successes and have a strong values-driven team culture.

Job Ref: #LI-CT1

A Movement for Everyone
We want to inspire and empower everyone to fight food waste together. With that mission, it’s only natural that we want to build a diverse and inclusive team of highly capable individuals who are passionate about doing things in a better way. We strongly believe we all excel and are more creative when we’re allowed to be ourselves, and we’re committed to a culture where all of us belong.
We are an equal opportunity employer and all employment is decided on the basis of qualifications, merit and business need. If you need reasonable accommodation at any point in the application or interview process, please let us know.