DevSecOps Engineer – Cloud Security

Stack

Responsibilities

• ▹Lead security development and own the security roadmap, moving from a developer-driven model to a specialised, automated DevSecOps practice
• ▹Advanced AWS hardening: Service Control Policies, refined IAM boundaries, GuardDuty/Macie integration
• ▹Integrate shift-left security gates into the existing CI/CD pipelines
• ▹Improve the EKS security architecture: network policies, runtime security, automated vulnerability remediation
• ▹Act as the main contact for the engineering team to balance fast feature delivery with high security standards

Requirements

• ▹4+ years in DevOps/SRE with a clear specialisation in cloud security for highly available SaaS products
• ▹Proven track record securing complex AWS environments and deep use of AWS-native security tools
• ▹Terraform expertise
• ▹Deep knowledge of the CNCF security landscape: protecting the cluster, pods and code
• ▹Negotiation-level English

Nice to have

• ▹German language skills

Soft skills

What we offer

• ▹Workation: work up to 6 weeks within the EU
• ▹Wellpass sport and wellness offering (9,000+ options)
• ▹Flexible, family-friendly working conditions
• ▹Fully remote or flexible mix of mobile work and office
• ▹Wide range of training and development options
• ▹Flat hierarchies and quick decisions

About the company

Checkmk is bringing its industry-leading monitoring solution to the cloud, built on a robust cloud-native AWS foundation.