Job
- Level
- Senior
- Job Field
- IT, System, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Munich
- Working Model
- Hybrid, Onsite
Job Summary
In this role, you will develop security concepts for an AI platform, conduct risk analyses, and harden Kubernetes environments while accompanying rollouts through security reviews and technical recommendations.
Job Technologies
Your role in the team
- Responsibility for the technical security of the AI platform based on Kubernetes and STACKIT.
- Conducting threat modeling and risk analyses for new AI applications.
- Support of rollouts through security reviews and specific technical recommendations.
- Securing and hardening Kubernetes environments with RBAC, Network Policies, Pod Security Standards, Admission Control, and Policy as Code.
- Further development of existing Policy-as-Code approaches, especially with Kyverno.
- Securing the software supply chain through signed container images, SBOMs, vulnerability scans, Trivy, and image hardening.
- Management and automation of secrets with Vault, including identities, tokens, and certificate lifecycle management.
- Further development of security monitoring with audit logs, security metrics, Prometheus, Grafana, Loki, and Alertmanager.
- Support in vulnerability management and security incidents within the platform context.
- Translation of requirements from BSI IT-Grundschutz, ISO 27001, and GDPR into concrete technical measures.
- Consulting DevOps and development teams for pragmatic and secure implementation in daily work.
This text has been machine translated. Show original
Our expectations of you
Education
- Completed degree in (Business) Informatics or a comparable qualification with professional experience.
Qualifications
- In-depth knowledge of Kubernetes Security, particularly RBAC, Network Policies, Pod Security Standards, Admission Control, and Policy as Code.
- Good understanding of Kubernetes, Terraform, Helm, and GitOps.
- Knowledge of BSI IT-Grundschutz, ISO 27001, and GDPR.
- Very good German skills (min. C1) and good English skills (min. B2).
Experience
- Several years of experience in the field of Cloud, Platform, or IT Security.
- Experience with container and supply chain security, such as Trivy, CVE management, image hardening, signed images, or SBOMs.
- Practical experience with Secrets Management, ideally with Vault.
- Experience in Threat Modeling, Risk Analyses, or Security Incident Response.
- Experience with monitoring and logging solutions such as Prometheus, Grafana, Loki, and Alertmanager.
- Experience with C5, KRITIS, or NIS2 is an advantage.
This text has been machine translated. Show original
What we offer
- We support occupational pension schemes and subsidize them with 20% from the first day of employment.
- We finance an occupational health insurance for you to reduce your additional costs in case of illness, for preventive services, or aids (for statutory and private insured individuals).
- Additional personalized benefits optimize your salary.
- We offer you a cost-effective shopping experience with our Corporate Benefits app, featuring a selection of over 800 top brands.
- We offer you health promotion and mobility measures, for example with our Jobrad program.
- We prioritize long-term collaboration based on trust and mutual respect.
- We offer you the opportunity for strategic and personal further education and development.
- We contribute to your work-life balance through flexible working hours and remote work.
- We receive top ratings from our employees (87% recommendation rate in the last 12 months and a score of 4.3 on Kununu).
This text has been machine translated. Show original
Benefits
Health, Fitness & Fun
Work-Life-Integration
Topics You Will Work On
Job Locations
About Your Employer
CompuSafe Data Systems AG
CompuSafe Data Systems AG is an established IT company specializing in tailored IT services and transformations since 1989. With a focus on project management, it supports corporate clients in optimizing their IT infrastructure.
Description
- Company Type
- Established Company
- Working Model
- Full Remote, Hybrid, Onsite
- Industry
- Internet, IT, Telecommunication
Senior Cloud Security Engineer
- Location
- Munich
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
