DevOps security engineer in container platforms

Apeirum GmbH; Barcelona; Hybrid; EUR 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid work model

Academy & professional development

Cobee program

Club Natació de Barcelona membership

Job summary

maxon в Барселоне ищет DevSecOps Security Engineer — ключевого специалиста по обеспечению безопасности контура контейнерной платформы. Вы будете работать в команде в Барселоне и в Швейцарии, внедрять безопасность на стадиях разработки, обеспечивать соответствие стандартам и поддерживать процесс доставки через GitOps.

Кандидат должен иметь опыт работы с OpenShift/Kubernetes, CI/CD и скриптами, владение английским на уровне свободного общения, готовность к поездкам и очной работе в гибридном

Qualifications

• 3+ лет практического опыта в DevSecOps или безопасности контейнерной платформы.
• Опыт securing OpenShift или эквивалентной enterprise Kubernetes в продакшене.
• Опыт внедрения security gates в CI/CD пайплайны.
• Умение работать с GitOps, policy as code, сканированием образов и secrets.
• Уверенное владение Python, Bash или PowerShell; понимание SDLC.
• Знание OWASP, ISO 27001 или CIS Benchmarks.
• Умение обучать разработчиков и давать практические рекомендации.
• Готовность работать с командой в другой локации — очно/асинхронно.
• Степень в области CS или сопутствующей направленности.
• Владение английским языком на свободном уровне.

Responsibilities

• Интеграция безопасности в CI/CD и GitOps для OpenShift: анализ, сканирование зависимостей и секретов.
• Определение базовой безопасности для кластеров OpenShift и реализация через GitOps.
• Поддержка команд разработки через threat modeling и безопасные user stories.
• Управление управлением уязвимостями контейнерной платформы и remediation с командами.
• Преобразование требований ISO 27001 и политик в автоматизированные проверки.

Skills

DevSecOps

OpenShift

Kubernetes

GitOps

CI/CD security

Scripting Python/Bash/PowerShell

Security frameworks (OWASP, ISO 27001,

English (fluent)

Collaboration

Education

University degree in computer science

Vocational training

Tools

OpenShift

Kubernetes

Docker

GitOps tooling

Job description

Описание:

As DevOps Security Engineer you join maxon's Group Software Development as the full-time security anchor of its on-premise OpenShift platform. You secure how software is built and run – from the first commit to the running container – and keep the platform hardened, compliant and resilient. You work every day with a small platform engineering team at maxon's Swiss headquarters (GitOps, four-eyes reviews, a fixed weekly sync), and in Barcelona you share the office with maxon's Cloud Security Engineer.

Задачи:

Build security into the CI/CD pipelines and GitOps deployments to OpenShift: static analysis, dependency and secrets scanning, container image scanning and image integrity checks – running as smoothly as every other quality gate. Define the security baseline for the OpenShift clusters (Security Context Constraints, RBAC, network policies, admission control, compliance profiles), implement it as GitOps changes reviewed by the platform engineers, and verify it continuously. Support development teams early: threat modeling, security user stories, secure-coding guidance and training. Run vulnerability management for the container platform: advisories, registry and runtime scan results, scoping application penetration tests and driving remediation with the teams. Turn ISO 27001 requirements and group security policies into automated checks, so audit evidence comes out of the pipeline instead of a spreadsheet. Automate the pipeline side of security response – blocking vulnerable releases, triggering rollbacks, feeding findings into the central incident and vulnerability process. Document the platform's security runbooks and build up deputy capability for cluster operations together with the platform engineers.

Требования:

3+ years of hands-on experience in DevSecOps or container-platform security. Experience securing OpenShift or a comparable enterprise Kubernetes distribution in production – or a strong Kubernetes background and the drive to go deep on OpenShift quickly. Hands-on experience building security gates into CI/CD pipelines. Confident with GitOps, policy as code, container image scanning and secrets management – tool-agnostic, because you know the principles behind the products. Scripting in Python, Bash or PowerShell; a solid understanding of the software development lifecycle. Knowledge of security frameworks such as OWASP, ISO 27001 or CIS Benchmarks. You enjoy coaching developers and turning security topics into practical guidance. You work well with colleagues in another location – written, asynchronous and structured – and like spending on-site weeks with the team in Switzerland. University degree in computer science or comparable vocational training. Fluent English. Based in Spain (Barcelona). Будет плюсом: German – a real advantage for working with the Swiss platform team; Red Hat certifications (e.g. OpenShift Administration or Security specialisations); Software supply-chain security (SBOM, signing, attestation); Azure fundamentals

Условия:

A permanent employment contract directly with maxon, competitive compensation based on your experience, flexible annual working hours and a hybrid model. Real ownership: you are the full-time security anchor of the container platform and influence open tool decisions. A dynamic and friendly workplace in maxon's Barcelona tech hub, combining startup energy with the stability of a Swiss industrial leader. International collaboration with teams in Switzerland and other locations, including regular on-site weeks at the Swiss headquarters. Continuous learning and growth through the maxon academy and professional development programs. Additional benefits such as Club Natació de Barcelona membership and the Cobee program.