Job
- Level
- Experienced
- Job Field
- IT, Security, Test/QA
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Neckarsulm
- Working Model
- Onsite
Job Summary
In this role, you implement security measures for software supply chains by automating CI/CD pipelines, managing dependencies, and conducting comprehensive vulnerability scans of applications and releases.
Job Technologies
Your role in the team
- Software Supply Chain Security (SSCS): Implementation of complete pipeline traceability and transparency, including the creation and enforcement of SBOM and SLSA attestations for all builds.
- Dependency Hardening: Ensuring the global security of dependencies through strict pinning and locking, as well as the use of internal proxies/mirrors to verify and secure all components.
- Vulnerability Management: Establishment of automated CVE scanning and reporting within CI/CD pipelines as well as the implementation of runtime security scans on clusters.
- Release automation: Automating the release rollout process to reduce manual interventions and increase overall development speed.
- Visibility & Traceability: Establish comprehensive monitoring and logging systems for releases to ensure auditability, clear documentation, and transparency of the provided artifact versions.
This text has been machine translated. Show original
Our expectations of you
Qualifications
- In-depth knowledge of CI/CD pipeline security, including SBOM/SLSA standards and artifact signing.
- Strong background in automation, Infrastructure-as-Code, and release management.
- Analytical mindset with a focus on observability, monitoring, and operational transparency.
Experience
- Proven experience in the field of DevSecOps, with a strong focus on Software Supply Chain Security.
- Experience in dependency management, vulnerability scanning (CVE), and securing containerized environments (e.g., Kubernetes).
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Topics that you deal with on the job
Job Locations
This is your employer
Schwarz Unternehmenskommunikation GmbH & Co. KG
The Schwarz Group, based in Neckarsulm, is a significant German conglomerate and one of the largest retail groups in Europe. It operates over 13,900 stores under the brands Lidl and Kaufland and employs around 575,000 people.
Description
- Company Type
- Established Company
- Working Model
- Full Remote, Hybrid, Onsite
- Industry
- Trade
DevSecOps Engineer
- Location
- Neckarsulm
- Working Model
- Onsite
- Diversity
- Open for all genders
