Senior Security and Compliance Engineer (m/f/d)

The role

You will own the security posture of the platform. This includes vulnerability management, incident response, compliance frameworks, and developer enablement.

What you will do

• Conduct security assessments, penetration testing, and vulnerability scanning
• Drive remediation with development teams
• Manage security scanning tooling (DAST/SAST) and perform security code reviews
• Design and implement security controls across the technology stack
• Define and enforce standards for development, infrastructure, and data
• Integrate security into CI/CD pipelines and development processes
• Develop and maintain the Security Incident Response Plan
• Monitor security logs via SIEM and lead forensic analysis
• Ensure compliance with GDPR and ISO 27001
• Manage IAM systems with a least privilege approach

Required qualifications

• 5+ years in a security engineering or similar role
• Hands-on experience with penetration testing, vulnerability management, and DAST/SAST tooling
• Solid understanding of DevSecOps principles and CI/CD security integration
• Familiarity with SIEM tools, incident response, and forensic analysis
• Knowledge of relevant compliance frameworks – GDPR, ISO 27001
• Strong communicator
• Fluent in English

Nice to have

• Ideally in a cloud or SaaS environment
• BSI IT-Grundschutz
• German is a strong plus

Benefits

• 32 days of paid time off
• 30 regular vacation days plus Christmas Eve and New Year's Eve off
• Meal allowance up to 15 digital vouchers per month totaling over €100 net
• Hybrid work setup with mobile work options and flexibility around core hours
• EGYM Wellpass & on-site gym
• Free in-house gym in Karlsruhe
• Employee events
• Company pension scheme
• Great public transport links

About the company

Codesphere is a Virtual Cloud Provider from Germany building sovereign cloud infrastructure. The company has an international team of 60+ experts based in Karlsruhe and Munich.