Cyber Security Engineer - Platform & DevSecOps (m/f/d)

Job description

• Design, implementation, and continuous development of the technical security architecture for large Kubernetes-based platform, software, and data infrastructures Hands-on analysis, hardening, and security validation of Linux, container, and Kubernetes infrastructures—from the host through the cluster to the application Conducting technical security assessments, penetration tests, and adversarial security tests against our own platforms and components to practically demonstrate vulnerabilities and realistic attack vectors Security review and hardening of Infrastructure as Code, as well as integration of automated security checks, security gates, and Policy-as-Code mechanisms into CI/CD and DevSecOps processes Securing Kubernetes environments, including RBAC, workload isolation, admission policies, network policies, secrets management, and runtime security Helping to shape a secure software supply chain, including for dependencies, container images, artifacts, SBOM, signing, provenance, and trusted build and deployment processes Analyzing and securing network connections and communication paths between platforms, data centers, external networks, and connected systems, including segmentation, firewalls, gateways, TLS/PKI, APIs, and machine-to-machine communication
• Design and technical validation of identity, authentication, and authorization concepts for users, services, and workloads, as well as secrets, credentials, certificates, and key management Ensuring the protection of data at rest, in transit, and during processing in close collaboration with platform and data engineering teams Conducting threat modeling, vulnerability analysis, and technical validation of findings; deriving and implementing effective countermeasures Further development of security monitoring, audit logging, and detection capabilities, as well as support for the technical analysis and resolution of security incidents
• Participate in the security assessment of AI/machine learning infrastructures and AI-based applications, and implement security proofs of concept through to production-ready solutions