Design and implement secure AWS architectures using EC2, S3, IAM, VPC, CloudTrail, GuardDuty, Security Hub, and KMS.
Design and enforce least privilege access, network segmentation, and secure connectivity models (Transit Gateway, VPC Peering, PrivateLink).
Integrate security tools and checks into CI/CD pipelines (e.g., GitHub Actions, GitLab CI, Jenkins) to enforce secure code and deployment practices; integrate SAST, DAST, SCA, and IaC scanning into pipelines.
Enforce secrets detection, artifact signing, and SBOM generation in build workflows.
Develop and maintain secure IaC templates using Terraform or AWS CloudFormation.
Secure Docker and Kubernetes workloads running on AWS (EKS), including image scanning, runtime protection, and RBAC policies.
Set up and manage AWS-native monitoring tools (CloudWatch, CloudTrail) and integrate with third-party solutions like Datadog or ELK for security observability.
Automate vulnerability scanning and remediation across cloud resources and application layers; build custom tooling/scripts for proactive detection and response.
Ensure AWS environments meet compliance standards such as SOC 2, ISO 27001, and GDPR; implement automated guardrails and policy enforcement using AWS Config and SCPs; deliver audit-ready evidence dashboards.
Build custom scripts and tools to automate security tasks, alerts, and reporting; develop incident response automation (Lambda/Step Functions auto-remediation).
Work closely with development, operations, and security teams to promote a DevSecOps culture; mentor junior engineers and conduct security training sessions.
Requirements
6+ years of experience in DevOps, Cloud Security, or Infrastructure Engineering.
4+ years of hands-on experience with AWS services and security best practices.
Strong proficiency in scripting languages (Python, Bash, etc.).
Experience with containerization (Docker) and orchestration (Kubernetes/EKS).
Familiarity with security tools like Snyk, Aqua, Prisma Cloud, HashiCorp Vault, etc.
Deep understanding of IAM, network security, encryption, and secure access patterns.
Experience with IaC tools (Terraform, CloudFormation) and version control systems (Git).
Knowledge of compliance frameworks and secure SDLC principles.
Preferred: AWS Certified Security – Specialty or other relevant AWS certifications.
Preferred: Experience with zero-trust architecture and cloud-native security models.
Preferred: Exposure to multi-account AWS environments and landing zone setups.
Preferred: Familiarity with DevSecOps maturity models and risk assessment methodologies.
Benefits
We offer a flexible and vibrant work environment; a global team filled with passionate and fun-loving people coming from diverse cultures and background.
Site Reliability Operations Analyst responsible for enhancing deployment processes at Palantir. Contributing to various projects while collaborating with teams globally.
Manager, DevSecOps at Zeus guiding a team to automate and enhance software development lifecycle efficiency. Leading integration of security practices across development, security, and operations teams in a premier polymer manufacturer.
DevSecOps Engineer for the Pathogen Programme developing secure data platforms. Focus on building automation for cross - functional teams in a collaborative research environment.
Koch für Betriebsrestaurant bei Klüh Catering in Reutlingen. Zubereitung von Speisen und Unterstützung bei Firmenevents für ein familiengeführtes Unternehmen.
HR Consultant advising on labor law and employee relations at the US Air Force in Ramstein. Supporting international staff and ensuring compliance with German labor regulations.
Sales Manager for AHORN Hotels & Resorts responsible for customer acquisition and sales trips. Collaborating with departments to coordinate events and manage customer relationships.
Sales Representative managing customer relationships in the Freiburg - Konstanz - Ravensburg region for Fuchs+Sanders. Responsible for customer acquisition, market observation, and achieving sales targets.
Sales Representative managing client relationships and acquiring new customers in the Kassel - Fulda region. Focus on achieving defined sales targets within a family - run wholesaler.