Senior Security and Compliance Engineer (m/f/d)
RemoteMunich, Bavaria, Germany or Germany
Job Summary
Conduct security assessments, penetration testing, and vulnerability scanning while driving remediation with development teams. Manage security scanning tooling and perform code reviews to integrate security into CI/CD pipelines and enforce standards across the technology stack. Design and implement security controls, monitor logs via SIEM, and lead forensic analysis when incidents occur. Ensure compliance with GDPR and ISO 27001, manage IAM systems with a least privilege approach, and deliver security awareness training for the company. This role supports Codesphere's sovereign cloud infrastructure platform, backed by top-tier investors and serving enterprises and governments.
Required Qualifications
- 5+ years in a security engineering or similar role
- Hands-on experience with penetration testing, vulnerability management, and DAST/SAST tooling
- Solid understanding of DevSecOps principles and CI/CD security integration
- Familiarity with SIEM tools, incident response, and forensic analysis
- Knowledge of relevant compliance frameworks – GDPR, ISO 27001
- Fluent in English
Desired Qualifications
- ideally in a cloud or SaaS environment
- German
- ideally BSI IT-Grundschutz
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.