About the role
About your tasks:
Build and maintain secure CI/CD pipelines, embedding security testing and controls into software development and deployment while enabling engineering teams to work efficiently and securely.
Strengthen application and cloud-native security, working hands-on with development teams across Kubernetes and containerized environments to identify risks and implement practical security controls.
Enable secure development across Data & AI by translating security requirements into practical guardrails, standards and solutions that AI/ML, MLOps and Data Science teams can apply in their day-to-day development.
CVE & vulnerability management: continuously identify and assess vulnerabilities, support their prioritization and work closely with application teams on practical mitigation and remediation.
Monitoring, security & continuous improvement: contribute to security testing, rollout and observability, advise teams when new security issues arise, and explore tooling and automation that can further strengthen application security.
About you:
You bring strong hands-on experience as a DevSecOps / Application Security Engineer, with the depth to secure applications and software development across cloud-native and Kubernetes environments.
You operate at a Senior/Staff level, with the technical depth and independence to own complex security topics and translate security requirements into practical solutions for engineering teams.
You have hands-on experience with CI/CD security and GitHub, GitLab or comparable tooling, including automating security guardrails, testing and checks within development pipelines.
You bring solid expertise in application and cloud-native security, including Kubernetes/container security, vulnerability management and CVEs, security scanning, triage/prioritization and remediation workflows.
You have a shift-left mindset and enjoy working closely with developers to embed security into how software is developed and deployed. Experience with Python and Data & AI/ML environments is a plus.
About your benefits:
In order to provide our employees with the best possible support for their individual needs, we offer a wide range of benefits:
Work from Home: If your job does not require you to be present in the office, we can arrange the place you work from individually - even for up to 20 days a year anywhere in the EU.
Redcare events: We promote teambuilding through creative team events, and celebrate our successes together at regularly scheduled parties.
Kindergarten Grant: We offer our employees who pay for childcare in kindergarten 100,00 € (total) per month.
Mental Health: Get quick and professional help from psychologists if you feel overwhelmed in private or professional life. Anonymous and free of charge.
Personal Development: We are all constantly learning. That's why we support and foster your career development through internal & external training and help you grow.
Mobility: Your commute matters to us. We provide our employees with a fully costed Deutschland Ticket which can be used at any time.
Sports & Health: Your well-being is our top priority. Therefore, we offer you a range of opportunities to improve your health. Profit from a membership (M) package at Urban Sports Club, providing a variety of sports offers tailored to your interests.
About Redcare Pharmacy:
As Europe’s leading online pharmacy, Redcare Pharmacy is driven by our dedicated teams and cutting-edge innovation. We strive to create an enjoyable and collaborative working environment where every employee feels comfortable and is motivated to contribute to our vision: “Until every human has their health.” If you are looking for a meaningful career that aligns with your values, join our team and start your #Redcareer.
About the role:
As Senior, DevSecOps Engineering within our Data & AI organization, you’ll help us make security an integral part of how we develop and deploy applications. Working closely with MLOps, Data Science, AI and Engineering teams, you’ll combine hands-on security engineering with practical guidance, strengthening security across the development lifecycle and helping teams address new and emerging security challenges.
About the tech stack:
Our security and development landscape includes GitHub / GitHub Actions, Azure DevOps, Kubernetes, Terraform and Python, alongside Azure services such as Entra ID (AAD), Key Vault, Azure Policy, Defender for Cloud and Microsoft Sentinel. For application, container and infrastructure security, we work with technologies and approaches including Aikido, Trivy, CodeQL, Dependabot, Checkov/tfsec and OPA/Gatekeeper or Kyverno. Our Data & AI environment also includes Databricks, Unity Catalog and MLflow.
While this is a remote position based in Germany, it may require occasional on-site collaboration at our offices in Berlin or Cologne, depending on business and team requirements.
Originally posted on Himalayas