DevSecOps Engineer (m/f/d)

Join our DevSecOps team and contribute to the evolution of our cloud products for global media, broadcast, and sports clients. As a DevSecOps Engineer, your primary responsibility is to champion the implementation of security practices and processes within our development and operations workflows. You will focus on integrating security seamlessly into every aspect of our software development lifecycle, ensuring the confidentiality, integrity, and availability of our systems and applications. Automation and integration of our cloud ecosystem in close collaboration with development teams will be a key component of your role.

The position can be performed remotely throughout Germany.

Automation and Integration:

• Automate infrastructure provisioning, configuration, and deployment processes to enhance operational efficiency
• Integrate security controls and tools seamlessly into the development and deployment processes
• Drive the automation of security testing and compliance checks within the continuous integration and continuous deployment (CI/CD) pipeline

Implement Security Best Practices:

• Collaborate on the design and implementation of scalable, secure, and highly available infrastructure
• Work closely with development teams to seamlessly integrate security practices into the software development lifecycle
• Implement and manage security tools and technologies to proactively identify and mitigate vulnerabilities
• Stay abreast of the latest security trends, threats, and technologies, actively sharing insights with the broader DevSecOps team

Event Management and Threat Detection:

• Enhance and maintain continuous event management solutions (monitoring, logging, alerting) for real-time detection and response to security threats
• Conduct regular security assessments and penetration testing in collaboration with development teams to identify and address vulnerabilities

Incident Response and Remediation:

• Actively participate in incident response activities, collaborating on effective remediation efforts
• Continuously improve incident response plans and procedures in close coordination with other teams

• Academic degree in Computer Science, Information Technology, or related field or equivalent professional qualification
• Proven experience as a DevSecOps Engineer or in a similar role, demonstrating a successful track record in securing development and operations workflows
• Real-world experience:
  • Proficient with containerization technologies
  • Familiarity with IaC tools
  • Expertise in configuration management tools
  • Hands-on experience with public Cloud Computing Platforms such as AWS, GCP, and Azure
  • Familiarity with event management objectives
• In-depth knowledge of security principles, practices, and technologies
• Fluent communication skills in English

Your Bonus Qualifications:

• Familiarity with Container Security: Container runtime security & Container hardening
• Familiarity with Cluster Security: Pod Security Admission (PSA) & Network Policies
• Familiarity with Observability: Chaos Security Engineering, involving controlled disruptions and simulated security incidents to uncover potential weaknesses, vulnerabilities, and points of failure in infrastructure and applications
• Familiarity with GitOps & CI/CD Principles

Our Tech Stack

• Technology: Docker, Kubernetes, Microservice architecture, EKS, AKS
• Tools & Frameworks: Helm, Terraform, Ansible, Grafana, Prometheus, Loki

• Aus- und Weiterbildung
• Flexible Arbeitszeiten
• Hybrid Work
• Firmenlaptop
• Gruppenunfallversicherung
• Betriebliche Altersvorsorge
• Coporate Benefits
• Mitarbeitenden Prämien
• Events

Wir sind ein dezentral organisiertes Startup-Unternehmen, das von Europa und den Vereinigten Staaten aus tätig ist. Unser Fokus liegt auf der Entwicklung einer Automatisierungs- und Integrationsplattform, die für professionelle Medienanwendungen zugeschnitten ist. Mit unserer Plattform qibb ermöglichen wir die nahtlose Erstellung von modularen Lösungen für die gesamte Medienlieferkette. Dies ermöglicht Medienhäusern eine größere Herstellerunabhängigkeit, Flexibilität und langfristige Kosteneffizienz. Als Mitglied unseres Teams bist Du Teil einer lebendigen und zukunftsweisenden Unternehmenskultur. Wir legen Wert auf einen modernen Arbeitsstil, der offene Kommunikation, Innovation und Zusammenarbeit fördert. Wir wollen ein Umfeld schaffen, in dem Deine Ideen gefördert werden und in dem Deine Beiträge einen echten Einfluss auf die Zukunft unseres Unternehmens und unserer Branche haben.