DevSecOps Engineer – Security in CI/CD

About the role

As a DevSecOps Engineer in our Lab environment, you will safeguard the integrity of our development and deployment pipelines. You will work closely with development, DevOps, and platform teams to embed security throughout the software lifecycle.

Key responsibilities

• Integrate and manage security testing in CI/CD pipelines, including scanning, validation, and approval of container images.
• Enforce quarantine processes for high‑risk artifacts and perform manual validation to reduce false positives.
• Collaborate with DevOps, Artifactory owners, and project managers to embed security best practices.
• Conduct vulnerability assessments across infrastructure, applications, and network environments.
• Develop and maintain automation scripts (e.g., Python) to enhance security testing and operations.
• Validate exploitability of identified vulnerabilities and drive remediation with development teams.
• Support Security Assurance in penetration testing, red‑team exercises, and defensive security evaluations.

Required profile

• Proven ability to integrate security controls into the software development lifecycle with a solid understanding of Shift‑Left Security principles.
• Experience in security engineering, DevSecOps, penetration testing or a similar role.

Required skills

• Jenkins CI/CD pipelines
• SAST and DAST tools
• Container scanning
• Docker and Kubernetes
• Python scripting
• Vulnerability assessment and penetration testing
• Artifactory management

What we offer

• Opportunity to work on a nation‑wide mobile network deployment in Germany.
• Collaboration with cutting‑edge research labs and start‑ups.
• Access to advanced security tooling and a supportive engineering culture.