Senior DevSecOps Engineer

Senior DevSecOps Engineer

Remote (European Union) - company based in Frankfurt, DE

InsurTech | Cloud Platforms | SaaS

For one of our clients, a fast-growing European technology scale-up, we are looking for a Senior DevSecOps Engineer to help embed security throughout the software development lifecycle while enabling engineering teams to deliver cloud-native products quickly, securely, and at scale.

Why Join?

• Help secure the next generation of digital insurance platforms
• Work with a modern cloud-native technology stack in AWS and Kubernetes
• Fully remote role open across the European Union
• Join a high-growth InsurTech scale-up backed by significant investment
• Shape security engineering practices from the ground up
• Excellent long-term career progression within one of Europe's fastest-growing InsurTech companies

What You'll Be Working On

• Embedding security into CI/CD pipelines and software delivery processes

• Automating security testing, compliance checks, and policy enforcement

• Designing and implementing secure cloud infrastructure using Infrastructure as Code

• Improving container and Kubernetes security across production environments

• Performing threat modelling and supporting secure architecture reviews

• Collaborating with engineering teams to improve secure coding practices and reduce security risks

• Supporting vulnerability management, incident response, and continuous security improvement initiatives

• Helping define DevSecOps standards, tooling, and best practices across the organisation

Experience Required

• 5+ years of experience in DevSecOps, Cloud Security, Platform Engineering, DevOps, or Security Engineering

• Strong hands-on experience with AWS or Azure cloud platforms

• Experience securing Kubernetes-based production environments

• Expertise in Terraform and Infrastructure as Code principles

• Experience integrating SAST, DAST, and software composition analysis tools into CI/CD pipelines

• Strong understanding of cloud security, IAM, networking, and secure software development practices

• Linux administration and scripting experience using Python, Bash, or similar languages

Nice to Have

• GitOps tools such as ArgoCD or FluxCD

• Policy-as-Code tools (OPA, Kyverno, HashiCorp Sentinel, etc.)

• OpenTelemetry, Prometheus, Grafana, or Datadog

• Secrets management platforms such as HashiCorp Vault

• Experience with SOC 2, ISO 27001, NIST, or CIS Benchmarks

• Cloud security certifications (AWS Security Specialty, Azure Security Engineer, CISSP, or CCSP)