ai engineer (m/f/d)

site reliability engineer

full stack engineer

ai engineer

analytics engineer

security engineer

Delivery Hero

<div><b>Company Description</b><p><br>
As the world&rsquo;s pioneering local delivery platform, our mission is to deliver an amazing experience, fast, easy, and to your door. We operate in around 65 countries worldwide powered by tech, designed by people. As one of Europe&rsquo;s largest tech platforms, headquartered in Berlin, Germany. Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index. We enable creative minds to deliver solutions that create impact within our ecosystem. We move fast, take action and adapt. No matter where you're from or what you believe in, we build, we deliver, we lead. We are Delivery Hero.</p><b><br>
Job Description</b><p><br>
We are looking for a Staff Security Engineer, Global SOC (all genders) to join the Security Engineering domain on our journey to always deliver amazing experiences.<br>
</p><p>As a Staff Security Engineer within our Global SOC, you will be the technical anchor for our Security Monitoring and Threat Detection capabilities across a high-transaction food delivery and quick-commerce platform handling millions of daily orders. As a business spanning logistics, e-commerce, and FinTech, our environment is highly regulated, in this role you will build and govern the systems that ensure rapid, high-fidelity threat detection in compliance with global frameworks.</p><p></p><p><br>
You will operate at the intersection of a hands-on technical practitioner and a strategic engineering leader. We are looking for someone with a strong 'builder mindset' who views threat detection as a software engineering discipline. Instead of staring at dashboards, you will architect and define our log pipelines, SIEM &amp; SOAR infrastructure, and implement Detection Engineering methodologies as code. You will develop threat detection use cases, integrate Cyber Threat Intelligence, and build the automated triage workflows that seamlessly escalate validated, high-severity incidents to our CSIRT team for final containment. Ultimately, you will provide a robust, scalable detection platform globally.</p><p><b>
Your mission:</b></p><ul><li><p>
Detection &amp; Platform Architecture: Architect, implement, strengthen and scale the Security Log Management (on AWS), SIEM and SOAR (Google SecOps) infrastructure. You will own the log ingestion pipelines, ensuring high availability, performance, and optimal retention based on business requirements.</p></li><li><p>
Engineering-Led Detection &amp; Automation: Architect, build, and maintain log ingestion pipelines, detection rules (e.g., YARA-L), API integrations, and SOAR workflows &amp; Plugins. You will lead the charge in treating &quot;Detection as Code&quot;, ensuring all alerts and automated enrichments are version-controlled, tested, and deployed through CI/CD pipelines.</p></li><li><p>
Cyber Threat Intelligence: Establish and integrate CTI capabilities to drive an intelligence-led detection strategy. You will map detections to the MITRE ATT&amp;CK framework and proactively hunt for threats specific to Delivery Hero and its entities.</p></li><li><p>
Triage &amp; Escalation Engineering: Design high-fidelity alert workflows. For all security events, you will ensure our automated systems gather, enrich, and seamlessly conduct the right response and containment workflow.</p></li><li><p>
Stakeholder Communication: Serve as the primary interface between the Global SOC and Engineering teams, CISOs, and the CSIRT team, translating complex detection &amp; response architectures, log ingestion pipeline requirements into clear technical and business terms.</p></li><li><p>
Mentorship &amp; Leadership: Act as a hands-on technical leader and role model, actively mentoring detection engineers and regional security teams to raise the overall technical bar and promote a collective security mindset.</p></li><li><p>
Metrics &amp; Strategic Visibility: Maintain a Data-Driven Strategic mindset to define, track, and improve core operational metrics (Log Pipeline Health, Alert Fidelity, True Positive Rates, MTTD) to identify systemic gaps and propose strategic security investments.</p></li><li><p>
On-Call: Participate in an on-call rotation focused on maintaining critical SIEM/SOAR infrastructure health, handling high-severity alert triage, and executing emergency escalations to CSIRT.</p></li></ul><b><br>
Qualifications</b><p><b><br>
What you need to be successful:</b></p><ul><li><p>
7+ years of broad cybersecurity experience with a deep understanding of core security fundamentals, coupled with 5+ years of dedicated experience in a SOC or Threat Detection Engineering environment.</p></li><li><p>
Security Tool Mastery: Deep operational and architectural expertise with modern SIEM &amp; SOAR platforms (specifically Google SecOps / Chronicle), EDR and Cloud infrastructure (AWS/GCP),</p></li><li><p>
Engineering Skills: Proven experience utilizing Git/GitHub, CI/CD pipelines, to deploy rules, manage infrastructure and automation as code.</p></li><li><p>
CTI &amp; Triage Workflows: Strong background in operationalizing Cyber Threat Intelligence and building scalable alert triage processes that reduce false positives and prevent alert fatigue.</p></li><li><p>
Strategic Leadership: An exceptional communicator with the ability to influence cross-functional stakeholders (Regional Security Teams, Platform Engineering) and simplify complex systems across domains without requiring formal authority.</p></li><li><p>
Advanced Threat Detection (Cloud, Identity &amp; EDR): Proven deep operational experience triaging alerts and building high fidelity detections across public cloud environments (AWS/GCP), modern Identity Providers (e.g., Okta, Entra ID, Google Workspace), and EDR platforms (e.g., CrowdStrike, SentinelOne, Defender).</p></li><li><p>
AI &amp; Next-Gen Tooling: Experience integrating AI/LLM capabilities and MCP (Model Context Protocol) usage into Threat Detection and SOAR for automated alert triage, payload analysis, or data enrichment (highly regarded skill).</p></li></ul><p><b>
Nice to have:</b></p><ul><li><p>
Advanced Cyber Threat Intelligence: Experience building threat intel programs, managing intelligence platforms (e.g., MISP), and translating raw IOCs/TTPs into high-fidelity detection logic.</p></li><li><p>
Regulated Environment Expertise: Deep operational understanding of global cybersecurity and privacy frameworks (e.g., PCI-DSS, GDPR, NIS2, DORA, MAS TRM). You know how to implement logging, retention, and audit capabilities that meet strict regulatory compliance requirements.</p></li><li><p>
Relevant Technical Certifications: Active or in-progress industry-recognized technical certifications focused on security engineering, cloud architecture, or threat detection (e.g., AWS Certified Security/Solutions Architect, GCIA/GCDA/GMON, CISSP).</p></li></ul><b><br>
Additional Information</b><p><br>
Ensuring you and all our Heroes are looked after, happy, and healthy is always on the menu. Because if you&rsquo;re in good shape, then we&rsquo;re in good shape.</p><ul><li><p><i>
Make the most of our </i>hybrid working model <i>and join the team for face-to-face connection and collaboration in our beautiful Berlin campus 2 days a week</i></p></li><li><p><i>
We offer 27 days holiday with an extra day on 2nd and 3rd year of service</i></p></li><li><p><i>
We will support you in developing yourself and your career growth opportunities: 1.000 &euro; Educational Budget, Language Courses, Parental Support and access to the Udemy Business platform to explore a variety of online courses.</i></p></li><li><p><i>
Get moving and release those wonderful, mind-boosting endorphins: Health Checkups, Meditation, Gym &amp; Bicycle Subsidy</i></p></li><li><p><i>
Cash. Dough. Cheddar. Whatever you call it, we&rsquo;ll help you with it: Employee Share Purchase Plan, Sabbatical Bank, Public Transportation Ticket Discount, Life &amp; Accident Insurance, Corporate Pension Plan</i></p></li><li><p><i>
The power of getting together over some food is unrivaled. Here are a few ways to help you do that. All the yum: Digital Meal Vouchers, Food Vouchers, Corporate Discounts. Courses.</i></p></li><li><p><i>
Wondering what relocating to Berlin is like? In this article, we&rsquo;ve put together</i> 10 things you should know about moving to Berlin<i> and how Delivery Hero can support you. You can also visit our </i>relocation hub<i> and check out more information about moving to Berlin.</i></p></li><li><p><i>
Ready to prepare for your interview? Check out the list of the </i>5 most common interview questions and answers <i>created in collaboration with our recruiters.</i></p></li></ul><p>
Ready to join our team? If you&rsquo;re excited to grow, collaborate and be part of the world&rsquo;s leading delivery platform, we&rsquo;d love to hear from you. Apply today!</p><p></p><p><br>
We believe diversity and inclusion are key to creating not only an exciting product, but also an amazing customer and employee experience. Fostering this starts with hiring - therefore we do not discriminate on the basis of racial identities, religious beliefs, color, national origin, gender identities or expressions, sexual orientations, age, marital or disability statuses, or any other aspect that makes you, you.<br>
<br>
We encourage you to let us know if you need any accommodations or specific accessibility support to ensure a smooth interview experience&mdash;just let us know with an email to our Inclusion Officer at inclusion@deliveryhero.cominclude it in your application.<br>
<br>
Severely disabled applicants with equal qualifications will be given preferential consideration.<br>
<br>
You're welcome to share your pronouns (he/she/they) right from the start so we can address you respectfully from our first contact.</p><p>
We believe diversity and inclusion are key to creating not only an exciting product, but also an amazing customer and employee experience. Fostering this starts with hiring - therefore we do not discriminate on the basis of racial identities, religious beliefs, color, national origin, gender identities or expressions, sexual orientations, age, marital or disability statuses, or any other aspect that makes you, you.<br>
<br>
We encourage you to let us know if you need any accommodations or specific accessibility support to ensure a smooth interview experience&mdash;just let us know with an email to our Inclusion Officer at inclusion@deliveryhero.com.<br>
<br>
<b>Severely disabled applicants with equal qualifications will be given preferential consideration.</b><br>
<br>
You're welcome to share your pronouns (he/she/they) right from the start so we can address you respectfully from our first contact.</p><div></div><p>
We believe diversity and inclusion are key to creating not only an exciting product, but also an amazing customer and employee experience. Fostering this starts with hiring - therefore we do not discriminate on the basis of racial identities, religious beliefs, color, national origin, gender identities or expressions, sexual orientations, age, marital or disability statuses, or any other aspect that makes you, you.<br>
<br>
We encourage you to let us know if you need any accommodations or specific accessibility support to ensure a smooth interview experience&mdash;just let us know with an email to our Inclusion Officer at inclusion@deliveryhero.com.<br>
<br>
<b>Severely disabled applicants with equal qualifications will be given preferential consideration.</b><br>
<br>
You're welcome to share your pronouns (he/she/they) right from the start so we can address you respectfully from our first contact.</p></div>

Staff Security Engineer, GSOC

<div><b>Company Description</b><p><br>
As the world&rsquo;s pioneering local delivery platform, our mission is to deliver an amazing experience, fast, easy, and to your door. We operate in around 65 countries worldwide powered by tech, designed by people. As one of Europe&rsquo;s largest tech platforms, headquartered in Berlin, Germany. Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index. We enable creative minds to deliver solutions that create impact within our ecosystem. We move fast, take action and adapt. No matter where you're from or what you believe in, we build, we deliver, we lead. We are Delivery Hero.</p><b><br>
Job Description</b><p><br>
As a Staff Security Engineer within our CSIRT Team, you will be accountable for leading our most critical, complex, and high-impact security incidents end-to-end across a global, high-transaction food delivery and quick-commerce platform handling millions of daily orders. As a business spanning logistics, e-commerce, and FinTech, our environment is highly regulated, in this role you will navigate the complexities of global compliance frameworks while ensuring rapid, effective incident mitigation.</p><p>
You will operate at the intersection of a hands-on technical practitioner and a strategic leader, making high-consequence decisions during times of ambiguity. We are looking for someone with a strong 'builder mindset'. You don't just respond to security incidents; you approach operational bottlenecks as engineering problems. You will build systems, develop custom tooling, and architect automated workflows to relentlessly eliminate manual toil and scale our response capabilities, ultimately setting the standard for engineering excellence and fostering a security mindset across the organization.</p><p></p><p><b><br>
Your mission:</b></p><ul><li><p>
Incident Commander: Serve as the single accountable leader during active responses for high-severity incidents, directing investigative focus from detection through recovery while maintaining a calm and decisive demeanor under pressure. You will ensure our response strategies and forensic evidence gathering align with strict reporting requirements for GDPR, PCI-DSS, NIS2, DORA, MAS TRM, and other regional mandates.</p></li><li><p>
Post-Incident Reviews &amp; Remediation: Lead blameless post-incident reviews to ensure continuous improvement, durable engineering solutions, and systemic resilience.</p></li><li><p>
Stakeholder Communication: Serve as the primary interface to stakeholders during critical security incidents, translating complex technical realities into clear risk, impact, and decision frameworks.</p></li><li><p>
Engineering-Led Response &amp; Automation: Design and develop in-house solutions, automated workflows, and scalable systems to eliminate repetitive processes, reduce triage time, and continuously improve the overall quality and efficiency of our security incident response operations.</p></li><li><p>
Mentorship &amp; Leadership: Act as a hands-on technical leader and role model, actively mentoring teams and individuals within your domain to raise the overall technical bar and share your experience.</p></li><li><p>
Metrics &amp; Strategic Visibility: Have a Data-Driven Strategic mindset to define, track, and improve core operational metrics (MTTD, MTTR) to identify systemic gaps and propose strategic, long-term security investments.</p></li><li><p>
Organizational Readiness &amp; Tabletop Exercises: Proactively design and facilitate complex, realistic tabletop simulations and purple team engagements to stress-test our playbooks, uncover detection blind spots, and train the wider security and engineering organizations.</p></li><li><p>
On-Call: Participate in a predictable on-call rotation as an Incident Responder, leading the charge on high-severity, out-of-hours escalations.</p></li></ul><p></p><b><br>
Qualifications</b><p></p><ul><li><p><br>
7+ years of broad cybersecurity experience with a deep understanding of core security fundamentals, coupled with 5+ years of dedicated experience in a SOC or CSIRT environment.</p></li><li><p>
Incident Commander Experience: Proven track record acting as a Security Incident Commander, confidently managing incident timelines, decisions, and cross-functional communications during complex security events.</p></li><li><p>
Deep Security Incident Response Expertise: Mastery of the full incident lifecycle and hands-on playbook creation for complex, high-availability hybrid-cloud environments, distributed microservices, and platforms processing vast amounts of PII and payment data.</p></li><li><p>
Security Tooling Mastery: Operational expertise with SIEM, EDR, Cloud Security platforms, SOAR, and WAF/DDoS protection solutions.</p></li><li><p>
Software Engineering &amp; Tooling (Builder Mindset): Advanced proficiency in writing production-quality code (e.g., Python, Go, Rust) to build scalable in-house solutions.</p></li><li><p>
Cloud-Native Security: Hands-on experience securing and responding to incidents across public cloud platforms (AWS, GCP) and cloud-native technologies like Kubernetes, Docker, and Infrastructure-as-Code (e.g., Terraform).</p></li><li><p>
Source Control &amp; CI/CD: Familiarity with Git/GitHub usage, CI/CD systems, and modern SecOps workflows.</p></li><li><p>
Strategic Leadership: An exceptional communicator with the ability to influence cross-functional stakeholders and simplify complex systems across domains without requiring formal authority.</p></li></ul><p><b>
Nice to have:</b></p><ul><li><p>
Investigative Depth: Digital forensics skills and hands-on experience integrating Threat Intelligence to anticipate attacks and proactively hunt for threats.</p></li><li><p>
Malware Analysis &amp; Reverse Engineering: Proven skills in static and dynamic (runtime) malware analysis, reverse engineering, and analyzing malicious payloads within isolated sandbox environments.</p></li><li><p>
Web/Mobile Security: Strong background in Web and Mobile application security, understanding complex API architectures, modern authentication frameworks, and defending against high-volume automated attacks (e.g., credential stuffing, scraping).</p></li><li><p>
AI &amp; Next-Gen Tooling: Experience integrating AI/LLM capabilities and MCP (Model Context Protocol) usage into Incident Response for automated evidence summarization, data enrichment, or investigation.</p></li><li><p>
Regulated Environment Expertise: Deep operational understanding of global cybersecurity and privacy frameworks (e.g., PCI-DSS, GDPR, NIS2, DORA, MAS TRM). You know how to balance aggressive incident containment with the legal and forensic requirements necessary for regulatory compliance and breach notification.</p></li><li><p>
Relevant Technical Certifications: Active or in-progress industry-recognized technical certifications focused on incident handling, forensics, or offensive security (e.g., GIAC GCIH/GCFA/GCIA, CISSP, OSCP).</p></li></ul><b><br>
Additional Information</b><p><br>
Ensuring you and all our Heroes are looked after, happy, and healthy is always on the menu. Because if you&rsquo;re in good shape, then we&rsquo;re in good shape.</p><ul><li><p><i>
Make the most of our hybrid working model and join the team for face-to-face connection and collaboration in our beautiful Berlin campus 2 days a week</i></p></li><li><p><i>
We offer 27 days holiday</i></p></li><li><p><i>
We will support you in developing yourself and your career growth opportunities: 1.000 &euro; Educational Budget, Language Courses, Parental Support, access to the Udemy Business platform to explore a variety of online courses</i></p></li><li><p><i>
Get moving and release those wonderful, mind-boosting endorphins: Health Checkups, Mindfulness and Gym &amp; Bicycle Subsidy</i></p></li><li><p><i>
The power of getting together over some food is unrivalled. Here are a few ways to help you do that. All the yum: Digital Meal Vouchers, Food Vouchers, Corporate Discounts. Courses and access to Internal Housing Hub</i></p></li></ul><p></p><p><br>
Ready to join our team? If you&rsquo;re excited to grow, collaborate and be part of the world&rsquo;s leading delivery platform, we&rsquo;d love to hear from you. Apply today!</p><p>
We believe diversity and inclusion are key to creating not only an exciting product, but also an amazing customer and employee experience. Fostering this starts with hiring - therefore we do not discriminate on the basis of racial identities, religious beliefs, color, national origin, gender identities or expressions, sexual orientations, age, marital or disability statuses, or any other aspect that makes you, you.<br>
<br>
We encourage you to let us know if you need any accommodations or specific accessibility support to ensure a smooth interview experience&mdash;just let us know with an email to our Inclusion Officer at inclusion@deliveryhero.com.<br>
<br>
<b>Severely disabled applicants with equal qualifications will be given preferential consideration.</b><br>
<br>
You're welcome to share your pronouns (he/she/they) right from the start so we can address you respectfully from our first contact.</p><div></div><p>
We believe diversity and inclusion are key to creating not only an exciting product, but also an amazing customer and employee experience. Fostering this starts with hiring - therefore we do not discriminate on the basis of racial identities, religious beliefs, color, national origin, gender identities or expressions, sexual orientations, age, marital or disability statuses, or any other aspect that makes you, you.<br>
<br>
We encourage you to let us know if you need any accommodations or specific accessibility support to ensure a smooth interview experience&mdash;just let us know with an email to our Inclusion Officer at inclusion@deliveryhero.com.<br>
<br>
<b>Severely disabled applicants with equal qualifications will be given preferential consideration.</b><br>
<br>
You're welcome to share your pronouns (he/she/they) right from the start so we can address you respectfully from our first contact.</p></div>

Staff Security Engineer, CSIRT

<div><b>Company Description</b><p><br>
As the world&rsquo;s pioneering local delivery platform, our mission is to deliver an amazing experience, fast, easy, and to your door. We operate in around 65 countries worldwide powered by tech, designed by people. As one of Europe&rsquo;s largest tech platforms, headquartered in Berlin, Germany. Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index. We enable creative minds to deliver solutions that create impact within our ecosystem. We move fast, take action and adapt. No matter where you're from or what you believe in, we build, we deliver, we lead. We are Delivery Hero.</p><b><br>
Job Description</b><p><br>
We are looking for a Staff Security Engineer (all genders) to join our Product Security team on our journey to always deliver amazing experiences.</p><p>
We are looking for a pragmatic, high-impact individual contributor to join our Product Security team as a Staff Product Security Engineer (IC4). In this pivotal role, you will drive the overarching technical strategy for application security, ensuring we reduce real-world risk across our entire product landscape without slowing down engineering velocity.</p><p>
You will champion a &quot;Secure by Design&quot; philosophy, moving away from reactive auditing and security gatekeeping. Instead, you will treat security as a collaborative engineering challenge, designing the automated guardrails, developer tooling, and technical frameworks that enable our engineering teams to scale rapidly and securely by default. As a Staff-level individual contributor, your leadership will extend beyond the immediate product boundaries and you will achieve domain-wide impact by seamlessly bridging the gap between Application Security, AI/ML security, Infrastructure Security, and Security Operations.</p><p><b>
Your mission:</b></p><ul><li><p>
Drive Product Security Maturity: Drive the strategic technical roadmap for the Product Security team, ensuring threat-modeling methodologies and secure coding practices scale efficiently across our global web and mobile application ecosystem.</p></li><li><p>
Lead Threat Modeling &amp; Security Architecture Reviews: Apply your expertise to identify complex security design flaws early in the Software Development Life Cycle (SDLC) using frameworks and automation tools, co-authoring architectural blueprints that are secure by default.</p></li><li><p>
Scale Vulnerability Management &amp; Governance: Architect and run our vulnerability management program at scale. You will ingest inputs from internal testing, automated tooling, and external Bug Bounty / Vulnerability Disclosure Programs, systematically validating and ranking vulnerabilities based on actual business risk.</p></li><li><p>
Master Stakeholder Management: Translate complex software and AI-related vulnerabilities into clear, actionable business risks, partnering closely with engineering leadership and product verticals to drive timely remediation without friction. systematically tracking and optimizing metrics such as Mean Time to Remediate (MTTR) and SLA Adherence % to elevate our overall security posture.</p></li><li><p>
Automate DevSecOps &amp; CI/CD Pipelines: Replace manual gates with seamless DevSecOps workflows, embedding automated security testing tools (SAST, DAST, SCA) directly into developer pipelines to catch high-risk flaws early.</p></li><li><p>
Pioneer AI-Driven Security Automation: Champion the adoption of artificial intelligence and LLMs to revolutionize our security workflows. You will design and implement cutting-edge AI-powered code security automation, leverage AI for automated vulnerability triage, and build smart security automation guardrails that scale engineering productivity.</p></li><li><p>
Cross-Domain Collaboration &amp; CSPM Management: Drive domain-wide impact by collaborating with Infrastructure Security to leverage Cloud Security Posture Management (CSPM) platforms, ensuring that application vulnerabilities are contextualized with cloud risk. Partner with Security Operations (Detection &amp; Response) to ensure proper application logging, alerting, and incident readiness.</p></li><li><p>
Mentor and Inspire: Act as a technical beacon within the security and engineering organizations. Define key security metrics, drive a strong security culture, and mentor junior and senior engineers to foster a world-class community of Security Champions</p></li></ul><p></p><b><br>
Qualifications</b><p></p><ul><li><p><br>
Proven Engineering Leadership: A strong track record of driving complex application security and DevSecOps initiatives as a staff-level individual contributor in massive, global software environments.</p></li><li><p>
Comprehensive Web &amp; Mobile Security: Deep, fundamental understanding of modern web and mobile application security topics, including hands-on experience managing external Bug Bounty and vulnerability disclosure programs.</p></li><li><p>
AI Security Expertise: Strong working knowledge of industry-standard security frameworks for artificial intelligence, such as the OWASP Top 10 for LLM Applications, MITRE ATLAS, and the NIST AI RMF.</p></li><li><p>
AI &amp; Security Automation Hands-on Experience: Practical understanding of utilizing artificial intelligence (including LLMs/Generative AI) for security engineering use cases, such as automated vulnerability analysis, script generation, triage optimization, and code security remediation.</p></li><li><p>
Privacy, Ethics &amp; Regulations: A solid understanding of global data privacy laws (e.g., GDPR), ethical AI considerations, and the regulatory impacts of the EU AI Act on application architecture.</p></li><li><p>
Risk-Based Vulnerability Management: Strong expertise in vulnerability validation and triage, with the ability to look past raw CVSS scores to calculate actual business impact, coupled with excellent stakeholder management skills to align engineering teams on remediation.</p></li><li><p>
Secure Coding &amp; Remediation Proficiency: Deep hands-on proficiency in multiple modern programming languages (e.g., Java, Python, Go) and the ability to confidently code, review, and remediate complex vulnerabilities (such as the OWASP Top 10) directly within application repositories.</p></li><li><p>
Cloud &amp; CSPM Familiarity: Strong working knowledge of cloud security (AWS, GCP, or Azure) and containerized ecosystems (Kubernetes, Docker), alongside an understanding of how to align application security signals with Cloud Security Posture Management (CSPM) platforms.</p></li><li><p>
Identity &amp; Access Management (IAM): Deep understanding of modern authentication and authorization protocols (OAuth, OIDC, SAML) and how to design and enforce Zero Trust architectures at scale.</p></li><li><p>
Cross-Functional Security Ops Alignment: Basic working knowledge of security operations, threat detection, and incident response, ensuring that product architectures are built to be auditable, observable, and resilient against live attacks.</p></li></ul><p><b>
Nice to have:</b></p><ul><li><p>
Experience securing highly distributed, event-driven microservices architectures at global scale.</p></li><li><p>
History of public security research, CVE discovery, or active contributions to open-source security or AI safety tooling.</p></li><li><p>
Advanced application security or cloud certifications (e.g., CSSLP, CASE, AWS Security Specialty, Google Professional Cloud Security Engineer, or CISSP).</p></li></ul><b><br>
Additional Information</b><p><br>
Ensuring you and all our Heroes are looked after, happy, and healthy is always on the menu. Because if you&rsquo;re in good shape, then we&rsquo;re in good shape.</p><ul><li><p>
Make the most of our hybrid working model and join the team for face-to-face connection and collaboration in our beautiful Berlin campus 2 days a week</p></li><li><p>
We offer 27 days holiday with an extra day on 2nd and 3rd year of service</p></li><li><p>
We will support you in developing yourself and your career growth opportunities: 1.000 &euro; Educational Budget, Language Courses, Parental Support and access to the Udemy Business platform to explore a variety of online courses.</p></li><li><p>
Get moving and release those wonderful, mind-boosting endorphins: Health Checkups, Meditation, Yoga, Gym &amp; Bicycle Subsidy</p></li><li><p>
Cash. Dough. Cheddar. Whatever you call it, we&rsquo;ll help you with it: Employee Share Purchase Plan, Sabbatical Bank, Public Transportation Ticket Discount, Life &amp; Accident Insurance, Corporate Pension Plan</p></li><li><p>
The power of getting together over some food is unrivaled. Here are a few ways to help you do that. All the yum: Digital Meal Vouchers, Food Vouchers, Corporate Discounts. Courses.</p></li></ul><p></p><p><br>
We believe diversity and inclusion are key to creating not only an exciting product, but also an amazing customer and employee experience. Fostering this starts with hiring - therefore we do not discriminate on the basis of racial identities, religious beliefs, color, national origin, gender identities or expressions, sexual orientations, age, marital or disability statuses, or any other aspect that makes you, you.<br>
<br>
We encourage you to let us know if you need any accommodations or specific accessibility support to ensure a smooth interview experience&mdash;just let us know with an email to our Inclusion Officer at inclusion@deliveryhero.cominclude it in your application.<br>
<br>
<b>Severely disabled applicants with equal qualifications will be given preferential consideration.</b><br>
<br>
You're welcome to share your pronouns (he/she/they) right from the start so we can address you respectfully from our first contact.</p><div></div><p>
We believe diversity and inclusion are key to creating not only an exciting product, but also an amazing customer and employee experience. Fostering this starts with hiring - therefore we do not discriminate on the basis of racial identities, religious beliefs, color, national origin, gender identities or expressions, sexual orientations, age, marital or disability statuses, or any other aspect that makes you, you.<br>
<br>
We encourage you to let us know if you need any accommodations or specific accessibility support to ensure a smooth interview experience&mdash;just let us know with an email to our Inclusion Officer at inclusion@deliveryhero.com.<br>
<br>
<b>Severely disabled applicants with equal qualifications will be given preferential consideration.</b><br>
<br>
You're welcome to share your pronouns (he/she/they) right from the start so we can address you respectfully from our first contact.</p></div>

Staff Security Engineer, Product Security team

Schwarz Digits KG

<p></p><div><div><div><div><ul><li><div><div><h2 class="jobSectionHeader"><b>Standort</b></h2><div><div>
Karl-Liebknecht-Stra&szlig;e 32<br>
10178 Berlin</div></div></div></div></li><li><div><div><p>
</p></div><div><h2 class="jobSectionHeader"><b>Abteilung / Bereich</b></h2><div><div>
IT - Security</div></div></div></div></li><li><div><div><p>
</p></div><div><h2 class="jobSectionHeader"><b>Einstiegslevel</b></h2><div><div>
Berufserfahrene</div></div></div></div></li><li><div><div><p>
</p></div><div><h2 class="jobSectionHeader"><b>Arbeitsmodell</b></h2><div><div>
Vollzeit</div></div></div></div></li><li><div><div><p>
</p></div><div><h2 class="jobSectionHeader"><b>Referenznummer</b></h2><div><div>
3940</div></div></div></div></li></ul></div></div></div>
<div><div><div><p>
Schwarz Digits schafft das technologische Fundament f&uuml;r digitale Entscheidungsfreiheit in Europa. Als IT- und Digitalsparte der Schwarz Gruppe entwickeln und verantworten wir einerseits die IT-Infrastrukturen f&uuml;r die Handelssparten Lidl und Kaufland sowie die Schwarz Produktion und PreZero. Gleichzeitig agieren wir als unabh&auml;ngiger Anbieter am externen Markt, um Unternehmen in ganz Europa bei ihrer digitalen Transformation zu unterst&uuml;tzen. Unsere Kernleistungen b&uuml;ndeln wir in den Bereichen Cloud, Cyber Security, Data &amp; AI, Communication und Workspace. Trage auch du zur digitalen Entscheidungsfreiheit in Europa bei.<br>
<br>
Bei uns arbeitest du an der Schnittstelle zwischen Agilit&auml;t und Sicherheit: Du profitierst von den schnellen Entscheidungswegen, genie&szlig;t echte Gestaltungsspielr&auml;ume in deinen Projekten und baust dabei auf das stabile Fundament der Schwarz Gruppe.</p></div></div></div>
<div><div><h3 class="jobSectionHeader"><b>
Deine Aufgaben</b></h3><div><div><ul><li>
Du verifizierst Schwachstellen aus automatisierten Web Application Scans mit deinem tiefen Verst&auml;ndnis f&uuml;r Angriffsvektoren, identifizierst False Positives und optimierst kontinuierlich die Scan-Policies.</li><li>
Du nutzt gezielt KI-gest&uuml;tzte Tools sowie Automatisierungsl&ouml;sungen, um Analyseprozesse zu beschleunigen und die Service-Qualit&auml;t stetig zu verbessern.</li><li>
Du stellst sicher, dass moderne Schnittstellen wie REST, GraphQL und SOAP nicht nur oberfl&auml;chlich, sondern tiefgehend und automatisiert auf Schwachstellen gepr&uuml;ft werden.</li><li>
Du gew&auml;hrleistest den stabilen Betrieb von Scans in hybriden Netzwerken (On-Prem &amp; Cloud) ohne Impact auf das Core Business und l&ouml;st technische H&uuml;rden bei Routing oder Firewalls souver&auml;n.</li><li>
Du agierst als Wissens-Multiplikator und Mentor f&uuml;r deine Kollegen, dokumentierst Prozesse nachhaltig und unterst&uuml;tzt so den perspektivischen Ausbau des Teams.</li><li>
Du bewertest bestehende Systeme sowie Abl&auml;ufe hinsichtlich ihrer Aktualit&auml;t und priorisierst deine Aufgaben im Team flexibel nach ihrer Wirkung und Relevanz f&uuml;r das Unternehmen.</li></ul></div></div></div><div><h3 class="jobSectionHeader"><b>
Dein Profil</b></h3><div><div><ul><li>
Du hast eine erfolgreich abgeschlossenes Studium mit Informatik Schwerpunkt und bringst mindesten 3 Jahre Berufserfahrung im Web Application Pentesting mit.</li><li>
Du kommunizierst sicher auf Deutsch (B2-Level) und Englisch (B2/C1-Level).</li><li>
Du &uuml;berzeugst mit tiefem Web-App Scanner &amp; API-Know-how, bist Power-User einschl&auml;giger DAST-Tools und verstehst genau, wie man komplexe Webanwendungen sowie APIs durchleuchtet &ndash; inklusive dem Setup von automatisierten Scans mit Logins/Credentials.</li><li>
Du besitzt tiefgehendes Know-how in der automatisierten Absicherung moderner Schnittstellen (REST, GraphQL, SOAP) und deren tiefgreifender Pr&uuml;fung.</li><li>
Du bringst idealerweise Programmier- und Script-Kenntnisse mit, um manuelle Routinen zu automatisieren und effiziente KI-Workflows zu entwickeln.</li><li>
Du bringst ein grundlegendes Verst&auml;ndnis f&uuml;r (hybride) Infrastruktur, Cloud-Technologien oder Kubernetes mit, um Scanner-Anbindungen und Troubleshooting eigenst&auml;ndig im Team zu l&ouml;sen.</li><li>
Du zeichnest dich durch eine proaktive, serviceorientierte Arbeitsweise aus und hast den Anspruch, dich sowie den Service im Team kontinuierlich weiterzuentwickeln.</li></ul></div></div></div></div>
<div><h2 class="jobSectionHeader"><b>Unsere Benefits</b></h2><p></p><div><div><div><p>
</p></div></div></div></div><p></p><div><h2 class="jobSectionHeader"><b>Dein Ansprechpartner</b></h2><div><div><h3 class="jobSectionHeader"><b>
Diana Wei&szlig;</b></h3><p>
Recruiterin</p><ul><li>
E-Mail:recruiting@mail.schwarz</li></ul></div></div></div>
<div><h2 class="jobSectionHeader"><b>Dein Bewerbungsprozess im &Uuml;berblick</b></h2><div><div><div><div>
1</div><h3 class="jobSectionHeader"><b>
Bewerbung</b></h3></div><div>
Wir lieben die Einfachheit. Bewirb dich schnell und unkompliziert digital, gerne auch ohne Registrierung.</div></div><div><div><div>
2</div><h3 class="jobSectionHeader"><b>
Checkup</b></h3></div><div>
Gemeinsam mit dem zust&auml;ndigen Fachbereich werfen wir einen Blick in deine Unterlagen.</div></div><div><div><div>
3</div><h3 class="jobSectionHeader"><b>
Kennenlernen</b></h3></div><div>
Bei einem ersten Kennenlernen liegt der Fokus sowohl auf deiner Pers&ouml;nlichkeit als auch auf deiner fachlichen Eignung.</div></div><div><div><div>
4</div><h3 class="jobSectionHeader"><b>
Vertragsangebot</b></h3></div><div>
Haben wir uns gegenseitig &uuml;berzeugt? Dann ist dein Arbeitsvertrag digital per Mail auf dem Weg zu dir.</div></div><div><div><div>
5</div><h3 class="jobSectionHeader"><b>
Willkommen</b></h3></div><div>
Dein erster Arbeitstag bei uns steht an und dein individuelles Onboarding im Team startet. Wir freuen uns auf dich!</div></div></div></div>
<div><div><div><h2 class="jobSectionHeader"><b>Diese Stellen k&ouml;nnten auch interessant sein</b></h2></div><p></p><div><p>
</p><div><div><div><p>BerufserfahreneBerlin</p><h3 class="jobSectionHeader"><b>
(Senior-) Professional Cyber Security Consulting (m/w/d)</b><b>(m/w/d)</b></h3></div></div></div><div><div><div><p>
BerufserfahreneBerlin</p><h3 class="jobSectionHeader"><b>
(Senior-) Consultant Cyber Security Asset Management (m/w/d)</b><b>(m/w/d)</b></h3></div></div></div><div><div><div><p>
BerufserfahreneNeckarsulm</p><h3 class="jobSectionHeader"><b>
Spezialist SAP Berechtigungs- &amp; Prozessmanagement (m/w/d)</b><b>(m/w/d)</b></h3></div></div></div><div><div><div><p>
BerufserfahreneNeckarsulm</p><h3 class="jobSectionHeader"><b>
(Senior) Professional Cyber Security Engineer (w/m/d) - Backup &amp; Archiving</b><b>(m/w/d)</b></h3></div></div></div><div><div><div><p>
BerufserfahreneNeckarsulm</p><h3 class="jobSectionHeader"><b>
(Senior) Professional Cyber Security Engineer (w/m/d) - Identity &amp; Access Management</b><b>(m/w/d)</b></h3></div></div></div><div><div><div><p>
BerufserfahreneNeckarsulm</p><h3 class="jobSectionHeader"><b>
Experte Cyber Security Governance &amp; ISO (m/w/d)</b><b>(m/w/d)</b></h3></div></div></div><div><div><div><p>
BerufserfahreneNeckarsulm</p><h3 class="jobSectionHeader"><b>
(Senior) Professional Cyber Security Engineer (w/m/d) - Netzwerksicherheit &amp; Kryptographie</b><b>(m/w/d)</b></h3></div></div></div><div><div><div><p>
BerufserfahreneNeckarsulm</p><h3 class="jobSectionHeader"><b>
(Senior) Professional Cyber Security Engineer (m/w/d) - Security Patch Management</b><b>(m/w/d)</b></h3></div></div></div><div><div><div><p>
BerufserfahreneNeckarsulm</p><h3 class="jobSectionHeader"><b>
Cyber Offensive Security Engineer / Red Team Engineer (m/w/d)</b><b>(m/w/d)</b></h3></div></div></div><div><div><div><p>
BerufserfahreneNeckarsulm</p><h3 class="jobSectionHeader"><b>
Senior Professional Cyber Security Consulting (m/w/d)</b><b>(m/w/d)</b></h3></div></div></div></div></div></div></div><p></p>

Application Security Engineer (m/w/d)

Eterno

<div><p><b>️ Your mission</b><br>
Application Security | Secure SDLC | AWS | SAST/DAST | Threat Modeling | Vulnerability Management | ISO 27001 | GDPR</p><p>
We build ETERNO Cloud, the operating system for modern medical practices. It brings the core workflows of a medical practice into one cloud SaaS platform. The product handles sensitive healthcare data in a regulated, GDPR-compliant, and ISO 27001-certified environment, so security needs to be part of how we build, ship, and operate software.</p><p>
You are the main AppSec owner inside engineering, working closely with ISMS, Cloud Platform, and Tech Leads to make application security actionable in product development.</p><p><b>
&zwj;️ What you shape and run</b></p><ul><li><p>
Secure development workflows across product engineering, from PR checks to CI/CD security gates</p></li><li><p>
SAST, DAST, dependency scanning, and IaC scanning that help teams find issues early</p></li><li><p>
Threat modeling, auth/authz reviews, secure API design, and permission model reviews for new and existing features</p></li><li><p>
Multi-tenant SaaS isolation, permission models, and healthcare data handling across product workflows</p></li><li><p>
Vulnerability management from finding and prioritization to remediation and closure</p></li><li><p>
Pentests with external partners, including scope, coordination, findings, remediation, and follow-up</p></li><li><p>
Technical security controls and evidence for ISO 27001, GDPR, risk management, and the ISMS</p></li><li><p>
Security monitoring and cloud security findings in close collaboration with Cloud Platform and Tech Leads</p></li><li><p>
Security guidance that helps teams ship safely without turning security into unnecessary process</p></li></ul><p><b>
️ What you care about</b></p><ul><li><p>
Security that is built into engineering workflows, not added at the end</p></li><li><p>
Clear ownership for vulnerabilities, risks, findings, and follow-up work</p></li><li><p>
Practical standards that help teams make good security decisions independently</p></li><li><p>
Protecting sensitive healthcare data through strong product, platform, and access controls</p></li><li><p>
Working closely with ISMS, Cloud Platform, Tech Leads, and product engineering</p></li><li><p>
Reducing risk without creating unnecessary friction for teams</p></li></ul><p><b>
&zwj;️ What to expect at ETERNO</b></p><ul><li><p><b>
Make a real impact</b> &ndash; Help us transform healthcare with bold, hands-on solutions for real challenges. Your contribution counts from day one &ndash; with responsibility, speed, and room for your own ideas.</p></li><li><p><b>
Your workspace &ndash; </b>Take advantage of our hybrid model: You&rsquo;ll spend 3 days a week at our office in Berlin to collaborate with your team, and the rest of the time you&rsquo;ll work flexibly from home.</p></li><li><p><b>
Level up &amp; grow</b> &ndash; Join an ambitious team that challenges and supports you. Whether leadership or deep dive: develop both professionally and personally through regular feedback, open exchange, and language courses in German &amp; English.</p></li><li><p><b>
Feel good, stay healthy </b>&ndash; Access the ETERNO Spaces for quick doctor visits &amp; health check-ups. For more movement in your day: lease a JobRad &ndash; tax-advantaged and eco-friendly.</p></li><li><p><b>
We&rsquo;ve got you covered </b>&ndash; Competitive salary, company pension with a 20% top-up, and a monthly budget for benefits like Urban Sports Club, vouchers, or public transport &ndash; plus attractive corporate benefits &amp; our Refer-a-Friend bonus.</p></li><li><p><b>
Stay connected </b>&ndash; Meet driven, inspiring people. Whether Monthly All-Hands, team offsites, or spontaneous office vibes &ndash; we celebrate success together and push each other as a team.</p></li></ul><p><b>
What we want to highlight</b><br>
At ETERNO, we promote equal opportunities and diversity. We are committed to creating a diverse and inclusive environment for every one of us. We reject any form of discrimination based on ethnicity, skin color, physical or mental disability, religion, marital status, age, national origin, ancestry, health status, pregnancy, gender, sexual orientation, gender identity, or any other personal characteristics.</p><p><i>
If you require any accommodations during the application process, please contact us in advance at careers@eterno.health. We are happy to support you.</i></p><p><i>
#LI-Hybrid</i></p></div>

Application Security Engineer (Berlin/hybrid)

Inceptive

<div><div><p>At Inceptive, you will drive forward development that could help billions of people. To accomplish this, you will be part of a collaborative, antedisciplinary team building our biological software.</p>
<p>
Our AI models depend on rich, high-quality biological datasets. The integrity, security, and reliability of those datasets and of the infrastructure that supports them are critical to everything we do. As we scale, we need someone who can architect and own the systems that keep our data and our customer&rsquo;s data safe, well-governed, and optimally accessible to our machine learning pipelines. This is a senior, hands-on role: you will design and build, not just advise.</p>
<p>
You will work closely with our ML researchers, data engineers, and computational biologists to understand data flows end to end. This includes data ingestion, training, inference, analysis, logging, result output, and model serving.</p>
<p>
Your work will help secure our infrastructure at every stage. It will also protect our most sensitive assets, including model configurations and weights, training data, and experimental results, from external adversaries and insider threats.</p>
<h3 class="jobSectionHeader"><b>
Your Mission, should you choose to accept it</b></h3>
<ul><li>Embody our vision of an antedisciplinary environment and embrace learning about areas outside of your traditional area of expertise</li>
<li>Architect, implement, and own secure data infrastructure supporting our AI model training and deployment pipelines &mdash; from raw data ingestion to model weight storage and access</li>
<li>Build and operate foundational security services: authentication systems, access brokers, secrets management, key management platforms, and egress/ingress controls across our multi-cloud environment</li>
<li>Design and enforce data governance frameworks, such as RBAC/ABAC policies, audit logging, encryption at rest and in transit, workload identity, and data lifecycle management</li>
<li>Embed security directly into our MLOps pipeline: CI/CD security controls, container and Kubernetes security, namespace isolation, and pod security standards</li>
<li>Conduct threat modeling and secure design reviews for existing and new systems, proactively identifying attack surfaces across the full AI tech stack</li>
<li>Identify, prioritize, and drive remediation of vulnerabilities across our data systems, cloud environments, and ML tooling, including AI-specific risks like data poisoning, model extraction, and unauthorized access to model weights</li>
<li>Build detection and alerting pipelines for anomalous data access patterns and potential exfiltration events</li>
<li>Establish security best practices and educate team members on secure coding, infrastructure patterns, and secure data handling for AI systems</li>
<li>Partner with ML and biology teams to ensure data handling practices meet the highest standards for sensitive research data</li>
</ul><h3 class="jobSectionHeader"><b>Qualifications and Requirements</b></h3>
<ul><li>7+ years of hands-on experience in data engineering, infrastructure security, or software security, ideally spanning both disciplines</li>
<li>Strong System and Software Engineering skills with production-quality code in Python, Bash, and at least one systems programming language (Go, Rust, or C++)</li>
<li>Deep experience securing GCP cloud environments, including IAM, VPC design, secrets management, workload authentication, and cloud security posture management</li>
<li>Proven track record designing and implementing identity and access management systems, including credential issuance, rotation, and least-privilege enforcement at scale</li>
<li>Hands-on experience with Kubernetes security: RBAC policies, namespace isolation, workload identity, pod security</li>
<li>Certifications (Highly Desirable): CISSP, OSCP, or GWAPT for core security credentialing, plus AI-focused certifications such as GAISC, Offensive ML (OffSec), or cloud provider AI security tracks (AWS/GCP).</li>
<li>Availability to work with team members across US and Europe, with meetings starting at 8am PT and ending at 7pm CET</li>
<li>Readiness to travel several times a year for company retreats and business events</li>
<li>We value the benefits of in-person collaboration and expect candidates to primarily work from our Palo Alto or Berlin offices</li>
</ul><h3 class="jobSectionHeader"><b>Preferred Technical Skills</b></h3>
<ul><li>PhD or advanced degree in Computer Science, Electrical Engineering, or a related field or equivalent practical experience</li>
<li>Familiarity with AI/ML-specific security risks: data poisoning, model extraction, prompt injection, unauthorized model weight access, and adversarial attacks on training pipelines, and practical mitigations for each</li>
<li>Experience securing ML infrastructure, including model registries, training cluster access, dataset versioning, experiment tracking systems, and GPU compute environments</li>
<li>Proficiency with Terraform infrastructure-as-code and GitOps security practices, including automated misconfiguration detection and remediation</li>
<li>Experience with compliance frameworks relevant to sensitive research data (SOC 2, HIPAA, GDPR) and translating them into concrete engineering controls</li>
<li>Background in offensive security techniques, including threat modeling, penetration testing, vulnerability research, or red team exercises. In a nutshell, the ability to think like an adversary</li>
<li>Experience building detection pipelines for insider threats, data exfiltration, and anomalous access patterns</li>
<li>Knowledge of cryptographic protocols and their practical application in distributed systems (key management, TLS, secure enclaves)</li>
<li>Prior experience in a fast-moving startup or research environment where security must scale alongside rapid growth</li>
</ul>
<p></p><h3 class="jobSectionHeader"><b>Compensation</b></h3>
<p>
$200K &ndash; $275K + Bonus + Equity</p></div><div><p>
What we offer</p>
<ul>
<li>A competitive compensation package</li>
<li>30 days paid vacation per year</li>
<li>Comprehensive health insurance for US based Beginners</li>
<li>401K with company match for US based Beginners and Direktversicherung for German Beginners</li>
<li>Quarterly company-wide retreats</li>
<li>Monthly wellness benefit</li>
<li>Budget for multiple visits per year to our offices in Berlin, Palo Alto or Switzerland</li>
<li>Learning &amp; Development budget to attend conferences, take courses, or otherwise invest in your professional growth, as well as access to the Learning &amp; Development platform EdX and Hone</li>
<li>A buddy to help you get settled</li>
</ul>
<ul><li><i>Varies by country and does not apply to internships</i></li></ul>
<p>
At Inceptive, we are creating tools to develop increasingly powerful biological software for the rational design of novel, broadly accessible medicines and biotechnologies previously out of reach. Our team brings together vast expertise in molecular biology, machine learning, and software engineering, and we are all working towards becoming antedisciplinary, meaning we deepen the knowledge we have in our area of expertise while also expanding our knowledge of completely new fields.</p>
<p>
We approach our goals with a Beginner's mind, humbly and with fresh eyes, and aim to become the pioneers of a new discipline rooted in biology as much as in deep learning, whose impact will be realized together with out-of-the-box thinkers in business and entrepreneurship, defying established categorizations. We are building a company culture centered around growth, learning, and discovery. We believe in humility and open-mindedness in how we approach each other, as well as problems we don't yet have solutions for.</p>
<p><i>
It is the policy of Inceptive to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, age, disability, marital status, citizenship, national origin, genetic information, or any other characteristic protected by law. Inceptive prohibits any such discrimination or harassment.</i></p>
<p><i>
Inceptive is also committed to welcoming and providing accommodations to people with disabilities. Please let us know if you need any accommodations throughout your application process.</i></p></div></div>

Secure Data Infrastructure for AI

Caspar-Health

<div><h4 class="jobSectionHeader"><b>What to Expect</b></h4><p>
At Caspar Health, we run a digital rehabilitation clinic where medical expertise meets high-end engineering. We don't just ship code; we provide patients with personal care from real therapists, powered by our platform. This means your work directly enables medical professionals to deliver life-changing therapy to people who otherwise wouldn't have access to it.</p><p>
We are looking for a DevSecOps/DevOps Engineer (all identities) with strong application and infrastructure security skills. We welcome experienced DevOps Engineers who bring solid security knowledge &mdash; understanding of common vulnerabilities, application security issues, and infrastructure hardening &mdash; and are ready to grow into a full DevSecOps role.</p><b><br>
You are a fit for this role if...</b><ul><li><p><b><br>
You live and breathe Cloud Security:</b> You have a solid foundation in AWS and believe that infrastructure is only as good as its security-first design</p></li><li><p><b>
You are an automation enthusiast:</b> You prefer writing Terraform or Python scripts over manual configurations any day of the week</p></li><li><p><b>
You are a bridge-builder</b>: You enjoy working at the intersection of Development and Operations, helping teams &quot;shift-left&quot; without slowing them down</p></li></ul><p><b><br>
We know you have choices. Here&rsquo;s why you should choose us:</b></p><ul><li><p><b>
Growth over Stagnation:</b> We don't expect you to be a finished DevSecOps guru on day one. If you are a solid DevOps Engineer with a security-focused mindset, we will provide the environment and support for you to become a true specialist</p></li><li><p><b>
Modern Stack &amp; Real Ownership</b>: Work with AWS, Kubernetes, and Terraform/Terragrunt. You won't just follow tickets; you&rsquo;ll help define our security architecture</p></li><li><p><b>
Purpose-Driven Tech</b>: Every line of code and every IAM policy you write directly contributes to someone&rsquo;s recovery and health</p></li><li><p><b>
Flexibility &amp; Balance</b>: We live the health-tech mission. Expect flexible working hours, a remote-friendly setup within Germany, and a culture that respects your &quot;deep work&quot; time</p></li></ul><p></p><h4 class="jobSectionHeader"><b><br>
Your Challenges</b></h4><p></p><ul><li><p><b>
Master the Alert Lifecycle</b>: Take the lead on triaging security alerts and vulnerabilities. You won't just &quot;fix bugs&quot;; you will coordinate smart remediations and build the systems that prevent them from reappearing</p></li><li><p><b>
Champion &quot;Shift-Left&quot;:</b> Integrate automated security testing, vulnerability scanning, and compliance checks directly into our CI/CD pipelines</p></li><li><p><b>
Fortify the Cloud: </b>Use Terraform and Terragrunt to evolve our AWS infrastructure into a gold standard of &quot;Security as Code&rdquo;</p></li><li><p><b>
Automate Compliance:</b> Work within an empowered Platform Squad to turn regulatory requirements into automated guardrails, ensuring compliance is a byproduct of our engineering rather than a manual chore</p></li><li><p><b>
Secure the Core: </b>Manage and harden our data layers (PostgreSQL, Redis) and orchestrate our K8s environment with a zero-trust mindset including applications</p></li><li><p><b>
Be the Security Mentor:</b> Collaborate with development squads to identify and remediate vulnerabilities early in the software lifecycle</p></li></ul><p></p><h4 class="jobSectionHeader"><b>
Your Profile</b></h4><p></p><ul><li><p><b>
A strong knowledge of application security:</b> common vulnerabilities (OWASP Top 10), secure coding practices, dependency scanning, and remediation</p></li><li><p><b>
The solid understanding of infrastructure security</b>: secure configurations, network segmentation, encryption at rest and in transit, access controls</p></li><li><p><b>
The DevOps Foundation:</b> You have a proven track record in AWS environments, managing Infrastructure as Code (Terraform) and containers (Docker/K8s)</p></li><li><p><b>
The Security Mindset:</b> You don&rsquo;t just build pipelines; you wonder how someone might break them. You&rsquo;re familiar with encryption, network segmentation, and secure access protocols</p></li><li><p><b>
The Problem Solver:</b> You enjoy Linux administration and can automate tasks using Python, Go, or Node.js</p></li><li><p><b>
The Communicator</b>: You can explain complex security risks to a developer in a way that inspires them to fix it. (English is our working language)</p></li></ul><br>
Note to DevOps Engineers: If your background is primarily in infrastructure but you have a strong desire to deepen your application security skills, we encourage you to apply. We value your curiosity and will support your growth into a full DevSecOps role.<p></p><h4 class="jobSectionHeader"><b>
Why Caspar Health?</b></h4><p></p><ul><li><p>
Remote-first with flexible working hours &ndash; office optional in Berlin-Mitte or up to 90 days a year outside of Germany</p></li><li><p>
To match this, we support you with a monthly home office allowance and an additional meal subsidy</p></li><li><p>
Plenty of time to recharge &ndash; with 30 vacation days per year</p></li><li><p>
Budget for learning &amp; development, conferences, and coaching &ndash; tailored to your potential and growth opportunities.</p></li><li><p>
High level of ownership and decision-making freedom &ndash; no micromanagement. We hire experts who know what they&rsquo;re doing. #MakeAnImpact!</p></li><li><p>
Genuine collaboration &ndash; no silos, no egos. After all, we&rsquo;re all working toward the same vision. #ValueFocus!</p></li><li><p>
Access to all Caspar offerings for mental and physical well-being #HealthyTogether!</p></li><li><p>
And yes &ndash; all the snacks your heart desires, group sports sessions, a never-empty drinks fridge, and a healthy dose of humor are included too.</p></li></ul><h4 class="jobSectionHeader"><b><br>
What Defines Us as a Team</b></h4><ul><li><p>
We live diversity &ndash; it's not a marketing slogan, it's part of our everyday reality</p></li><li><p>
Feedback isn&rsquo;t a tool &ndash; it&rsquo;s part of our culture</p></li><li><p>
We believe that technology only makes sense when it truly helps people</p></li><li><p>
Our drive is purpose &ndash; but our standard is professionalism</p></li></ul><p></p><p><br>
At Caspar Health, we strive to provide a friendly, safe and welcoming environment for all Casparians* regardless of ethnic origin, gender, gender identity and expression, sexual orientation, limitations of any kind, physical appearance, social background, age or religion (or lack thereof).</p><p>
When you apply, we purely focus on your experience and motivation. You decide what additional information you want to disclose (picture, marital status, religion, gender, nationality, etc). We value and treat all applications equally.</p><p>
We are looking forward to getting to know you!</p><p></p><h4 class="jobSectionHeader"><b>
Your Contact</b></h4><p></p><p>
Dana Kussatz, Talent Acquisition Expert and HR Tech Business Partner.<br>
<br>
Please use our Career Page to apply to this position, we will not consider applications via email.<br>
We are looking forward to receive your CV, salary expectation and your earliest starting date.<br>
<br>
Diversity and Inclusion:<br>
At Caspar Health, we strive to provide a friendly, safe, and welcoming environment for all Casparians &ndash; regardless of gender, gender identity and expression, sexual orientation, disabilities of any kind, physical appearance, social background, age, or religion (or lack thereof).<br>
In your application, we focus on your experience and motivation. It&rsquo;s entirely up to you which additional personal information you'd like to share (photo, marital status, religion, gender, nationality, etc.). We value and treat all applications equally.</p><p>
Our product CASPAR Health is used in the environment of medical institutions, patients, doctors and therapists. Working with (sensitive) personal data (e.g. health data) is part of our daily work. Therefore, we require a high level of commitment to the protection of personal data from our employees in order to protect the rights of the data subjects as best as possible.</p><p>
Note on data protection:</p><p>
Please apply exclusively via our career site, as this is the only way we can guarantee the protection of your data. You can find our privacy policy here.</p><p></p><h4 class="jobSectionHeader"><b>
About us</b></h4><p></p><p>
Caspar Health is a digital rehabilitation clinic with a vision to provide patients with access to the most effective rehabilitation treatment at any time, any place.</p><p>
 Medical facilities use Caspar Health to conduct therapy measures online with their patients during their hospital stay and after discharge. The combination of learning technology with in-depth medical knowledge ensures that the therapy goal is achieved in a sustainable manner.</p><p>
 The services are covered by numerous pension insurance companies in the areas of rehabilitation, prevention and aftercare.</p></div><p></p>

DevSecOps/DevOps Engineer (all identities)

Explore 268+ Security engineer in Berlin this July. Find roles across top companies and apply now to boost your career.