AI DevSecOps Engineer - Customer & Marketing (m/f/d)

MediaMarkt España; Barcelona; Híbrido; EUR 45.000 - 70.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

10% discount on MediaMarkt website

Flexible working time

Training budget for development

Language classes in English, Spanish, and German

Birthday off

Descripción de la vacante

MediaMarkt España is looking for a skilled professional for AI platform security, focusing on implementation of security measures and compliance with regulatory frameworks like the EU AI Act and GDPR. The ideal candidate will have 3-5+ years of experience in Software Engineering, with a strong emphasis on DevSecOps and cybersecurity in cloud environments. The job offers flexibility, a vibrant work culture, and various benefits including discounts and training opportunities.

Formación

• 3–5+ years in Software Engineering focused on DevSecOps, cybersecurity, or platform security.
• Strong knowledge of cybersecurity principles and secure coding practices.
• Experience with regulatory compliance like EU AI Act and GDPR.
• Hands-on cloud security services experience.
• Proficient with security automation tools.

Responsabilidades

• Design and implement security measures for AI platform infrastructure.
• Establish AI model management policies and governance structures.
• Ensure regulatory compliance with EU AI Act and GDPR.
• Define secure access controls and data isolation protocols.
• Integrate security practices into CI/CD pipelines.

Conocimientos

DevSecOps

Cybersecurity

Cloud Security

Risk Assessment

Communication

Herramientas

SAST/DAST tools

Vulnerability scanners

Descripción del empleo

Your Tasks

• AI Platform Security Implementation: Design and implement comprehensive security measures and threat protection systems for AI platform infrastructure, ensuring robust defense against emerging security vulnerabilities and attack vectors.
• AI Governance Framework Development: Establish and maintain AI model management policies, operational oversight frameworks, and governance structures that ensure responsible AI deployment and lifecycle management.
• Regulatory Compliance Management: Ensure platform adherence to regulatory requirements including EU AI Act, GDPR, and industry standards, implementing compliance monitoring and reporting mechanisms.
• Trust Boundary Architecture: Define and enforce secure access controls, data isolation protocols, and security boundaries between system components to maintain data integrity and prevent unauthorized access.
• DevSecOps Pipeline Integration: Integrate security practices into CI/CD pipelines, implementing automated security testing, vulnerability scanning, and compliance validation throughout the development lifecycle.
• Security Monitoring & Incident Response: Build and maintain security monitoring systems, establish incident response procedures, and create automated threat detection capabilities for AI workloads.
• Documentation & Training: Create comprehensive security documentation, compliance guides, and provide security awareness training to development teams on AI‑specific security considerations.

Your Profile

• Experience: 3–5+ years in Software Engineering with specialized focus on DevSecOps, cybersecurity, or platform security in cloud environments.
• Security Expertise: Strong knowledge of cybersecurity principles, threat modeling, secure coding practices, and experience implementing security controls in distributed systems.
• Compliance Knowledge: Familiarity with regulatory frameworks such as EU AI Act, GDPR, ISO 27001, and experience building compliance monitoring and reporting systems.
• AI Security Understanding: Knowledge of AI‑specific security challenges including model security, data privacy in ML pipelines, and adversarial attack prevention.
• Cloud Security: Hands‑on experience with cloud security services, identity and access management (IAM), network security, and infrastructure security best practices.
• DevSecOps Tools: Proficiency with security automation tools, vulnerability scanners, SAST/DAST tools, and experience integrating security into CI/CD pipelines.
• Risk Assessment: Ability to conduct security risk assessments, threat analysis, and develop mitigation strategies for AI platform components.
• Communication: Excellent English skills with ability to communicate security requirements clearly to technical and non‑technical stakeholders and work effectively in cross‑functional teams.

Additional Benefits

• Young environment, where not everything is written in stone, and where you are expected to contribute and co‑create the culture of the Tech Hub and international collaboration model.
• 10% discount on the entire MediaMarkt website.
• Flexible Pay “MediaFlex program” (e.g., Ticket Restaurant, Private Health Insurance with SegurCaixa Adeslas).
• Flexible working time and possibility to combine home office / presential working. Intensive workday every Friday and during summer.
• Option to choose between two offices: MediaMarkt Iberia HQ and Pier01 in Barceloneta.
• Visa assistance for international candidates.
• Training budget for continuous professional and personal development.
• Language classes: English, Spanish, and German.
• On your birthday, you won’t work – a day to enjoy without thinking about work.
• Working with the most cutting‑edge technological stack of the moment.