Senior Software Engineer, Platform (Security Focused) (m/f/d)

casavi GmbH; Germany (OH); Hybrid; USD 103,626 - 143,926; Full time

Benefits offered by this job

Flexible hybrid work

Workation 40 days

Company events

Sports benefits

Company pension

Childcare allowance

Wellpass discount

Education budget

Job summary

casavi GmbH, based in Munich, Germany, is seeking an experienced Platform Engineer focusing on Application Security to advance a robust, cloud-native platform used by property management customers.

You will own core platform features, secure SDLC practices, CI/CD pipelines, and IaC, working with AWS, Kubernetes, and modern tooling to keep systems reliable, scalable, and secure.

Qualifications

• Several years of experience with TypeScript/Node.js stack including REST APIs and databases.
• Proven track record establishing secure SDLC in software teams.
• Hands-on experience running production Kubernetes clusters and cloud infra (AWS).
• Experience securing pipelines, containers, and infra with tooling like Trivy, Snyk, Vault.

Responsibilities

• Own platform features and infrastructure for a Kubernetes-based, AWS-hosted environment.
• Embed security into SDLC, automate security tests, and enforce guardrails and IaC practices.

Skills

TypeScript

Node.js

REST APIs

MySQL

MongoDB

Nest.js

React

Python

Kubernetes

AWS

Terraform

Helm

GitOps (ArgoCD)

CI/CD (GitLab)

Security in SDLC

Application Security

Observability (Prometheus/Grafana)

English communication

Tools

Trivy

Snyk

Vault

AWS Secrets Manager

Prometheus

Grafana

GitLab CI/CD

Copilot

Job description

Your Mission

• You are part of our dedicated Platform team, building and operating the foundation that every product team at casavi builds on.
• With the team, you own and evolve our platform: from core product features every team builds on, like Auth, I18n, Feature Flags, and so on, to infrastructure, with our AWS setup, Kubernetes clusters, GitOps workflows, and Infrastructure-as-Code (IaC), working with Terraform, Helm, ArgoCD, and GitLab CI/CD, while monitoring system health with Prometheus & Grafana.
• Your main personal focus is Application Security: making sure our product stays robust and reliable in the face of modern growing security threats, via comprehensive automated quality gates, regular security testing being done as a practice, strong security standards embedded in the SDLC of our teams, and appropriate instrumentation of the AI Coding Assistant tooling our team is using.
• You also bake security into our infrastructure, implementing automated vulnerability scanning, secure secrets management, and Policy-as-Code guardrails so that shipping securely is always the path of least resistance.
• You harden our cloud environments, ensuring robust IAM configurations, network policies, and foundational security baselines are continuously enforced.
• You collaborate closely with fellow engineers across the Platform team and with product teams, bringing your ideas to make our platform more reliable, scalable, and easy to build on.

Your Profile

• You have several years of experience working with TypeScript (our tech stack includes Node.js, REST API, MySQL, MongoDB, Nest.js, React) and, ideally, also Python (our Python stack: Flask, FastAPI, MongoDB).
• You care about Application Security deeply and have a proven track record of establishing secure SDLC in software engineering teams.
• You have proven hands-on experience running production Kubernetes clusters and managing cloud infrastructure. You know AWS, Terraform, Helm, GitOps (ideally ArgoCD), and CI/CD pipelines (ideally GitLab CI).
• You understand cloud-native security principles and have experience securing pipelines, container images, and infrastructure (e.g., using AWS Secrets Manager, Vault, Trivy, Snyk, or similar tooling).
• You are a power user of AI-based tools (GitHub Copilot, Claude Code, Codex, etc.), and you know how to use them to build lightweight internal tooling and automation safely and responsibly.
• You'd rather script and orchestrate an agentic workflow than stand up a heavyweight developer portal.
• You have excellent analytical & problem-solving skills and enjoy owning problems end-to-end, from root cause to fix.
• Ideally, you have strong experience with observability tooling (Prometheus/Grafana) and monitoring production systems.
• You are a strong communicator, and your English is at a very good level (>C1).
• You live in Germany.

Conditions & Benefits

• An open-minded and friendly team working with agile methods - as proven by our Kununu Score of 4,6
• Flexible & hybrid working
• 40 days of workation per year in the EU
• Company events & sports offers
• Corporate benefits
• Company pension scheme
• Childcare allowance
• EGYM Wellpass membership discount
• Diverse development opportunities and a continuing education budget

About Us

casavi is a growing PropTech company based in Munich, Germany. Since 2015, our software has enabled more than 2000 property management and housing companies in German-speaking countries to digitalise their daily processes by automating workflows. More than 120 employees work every day to optimise our product and accelerate casavi's growth. Our cloud solution connects property management companies, housing companies, tenants, owners and service providers in one central system. Functions such as intelligent process management, a customer portal with an app, integrated partner solutions and our service provider platform relay ensure more efficient processes, better communication and a noticeable reduction in workload. With the rapid development of technology and the emergence of AI, we are changing the way property managers simplify their daily work and offer their customers a better experience. To achieve this ambitious goal, we are looking for talented and motivated people to join our intercultural and diverse team with their expertise.