DevSecOps Engineer (m/f/d)

As a DevSecOps Engineer, you’ll help keep our platforms, endpoints, and cloud environments secure throughout their lifecycle. You’ll embed security controls into day-to-day operations, focusing on vulnerability management, patch management, and lifecycle management. Working closely with IT, infrastructure, and development teams, you’ll help remediate risks, automate security controls, and ensure our security requirements are effectively implemented in production.

• Take ownership of the vulnerability management lifecycle, from discovery and risk-based prioritization to remediation tracking and reporting.
• Coordinate patch management across servers, endpoints, containers, and cloud workloads, ensuring agreed security SLAs are met.
• Monitor asset and software lifecycles, identifying end-of-life and end-of-support components and coordinating timely upgrades or decommissioning.
• Operate and continuously improve security tooling, including monitoring solutions, XDR, SIEM, vulnerability scanners, and configuration baselining tools.
• Implement and strengthen security controls across infrastructure-as-code, CI/CD pipelines, and cloud configurations, following recognized baselines such as CIS and NIST.