Job
In this role, you will develop Security Champion programs, train teams on security culture, and integrate security tools into the SDLC, while working with modern technologies like GCP, Kubernetes, and Terraform.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- Development and continuous improvement of a Security Champion Program and alignment of community events such as Capture the Flag.
- Improvement of security culture through training and coaching of software engineers, leaders, and product owners with practical tasks in offensive security as well as security by design and secure coding.
- Creating guidelines that describe concrete, practical activities and tools in the SDLC for software developers, thereby making the requirements from the Information Security Management System manageable.
- Development and enhancement of DevSecOps security and compliance tools that integrate security into the SDLC according to Shift Left. Supporting platform teams in integrating the tools into their platforms.
- Independent, agile working within and with self-organized teams.
- Working with a tech stack that includes microservices in GCP, Terraform, Kubernetes, Kafka, Elasticsearch, PostgreSQL, Java monoliths on VMs, SAP, and mainframe.
Our expectations of you
Education
- Completed degree in Computer Science with a clear focus on IT Security or a comparable completed qualification. Alternatively, we also welcome applications from individuals without the relevant qualification but with many years of experience.
Qualifications
- Expertise in Web Application Security Testing, Cloud and Network Security Assessment.
- Knowledge in Web Application Security, e.g., vulnerabilities and solutions for the OWASP Top 10.
- You were a Security Champion or Security Engineer in an Agile product team.
- You have mastered Prometheus, Grafana, Terraform, Kubernetes, Google Cloud Platform (GCP).
- DevOps mindset and interest in outcome-oriented, experimental, data-driven product development, as well as automation, CI/CD, DevOps, SDLC, DevSecOps, and microservice architectures.
Experience
- Experience in creating guidelines and architecture specifications that meet the requirements of an ISMS according to ISO27001.
- Initial practical experience in building security communities and security champion programs.
What we offer
- Your life-work integration through flexible working hours, remote work, 30 days of vacation + regional traditional days, time-off models (sabbatical, caregiver leave, etc.), and company kindergarten.
- More time for yourself - take advantage of the opportunity to have up to two additional weeks of free time per year; individually plannable and flexibly redeemable in consultation with your team.
- We invest in your future. With your annual training budget, you can learn to develop your individual skills.
- Updates for you on in-house workshops and events, such as the hackathon and tech talks, as well as weekly stand-ups, regular tech all-hands, and open door formats.
- Your impact, because you develop applications and services for millions of people - with over 1 billion data records daily, on more than 6 million phones, 32,000 cash registers, or in 7,300 markets.
- Your relaxed commute with the discounted Germany ticket, a company bike, and parking spaces right outside the door.
- Our networks such as DITO - different together, SHINE, f.ernetzt, WomEngineers @REWE digital, and Women's Drive make us a vibrant community and support you in your personal development.
- Advantages of a corporation for you, e.g., in the form of discounts at REWE, PENNY, toom Baumarkt, and the DERTOUR Group, comprehensive healthcare benefits, support for your retirement provision through asset-building benefits and the REWE Pensionskasse, special benefits such as holiday and Christmas bonuses, and much more.
Benefits
Health, fitness & fun
Food & drink
Topics you will work on
Job locations
About your employer
As drivers of the digital innovation of the REWE Group, we are responsible for all strategic online activities of one of Europe's leading trade and tourism companies. Our most important brands at home and abroad include REWE, Penny, Billa, Merkur, BIPA, ITS , DER Touristik Meier's World Travel Jahn Reisen and Toom Hardware Store.
- Digital Agency
- Onsite, Hybrid
- Internet, IT, Telecommunication
More jobs
These jobs might also interest you
sino AG, based in downtown Düsseldorf, has been an innovative financial service provider for over 25 years. We specialize in the execution of securities transactions for the most active and demanding traders in Germany. With currently 26 employees, we...
Participation in security analyses and assessment of applications and IT systems. Support in the design and implementation of technical security measures (e.g., WAF, Load Balancing, Firewall, etc.). Conducting and supporting penetration tests,...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...