DevSecOps/DevOps Engineer (all identities)What to Expect

About the role

We are looking for a DevSecOps/DevOps Engineer with strong application and infrastructure security skills. We welcome experienced DevOps Engineers who bring solid security knowledge — understanding of common vulnerabilities, application security issues, and infrastructure hardening — and are ready to grow into a full DevSecOps role.

What you'll do

• Take the lead on triaging security alerts and vulnerabilities, coordinate smart remediations and build systems that prevent them from reappearing
• Integrate automated security testing, vulnerability scanning, and compliance checks directly into our CI/CD pipelines
• Use Terraform and Terragrunt to evolve our AWS infrastructure into a gold standard of "Security as Code"
• Turn regulatory requirements into automated guardrails, ensuring compliance is a byproduct of our engineering rather than a manual chore
• Manage and harden our data layers (PostgreSQL, Redis) and orchestrate our K8s environment with a zero-trust mindset
• Collaborate with development squads to identify and remediate vulnerabilities early in the software lifecycle

What you'll need

• Strong knowledge of application security: common vulnerabilities (OWASP Top 10), secure coding practices, dependency scanning, and remediation
• Solid understanding of infrastructure security: secure configurations, network segmentation, encryption at rest and in transit, access controls
• Proven track record in AWS environments, managing Infrastructure as Code (Terraform) and containers (Docker/K8s)
• Ability to automate tasks using Python, Go, or Node.js; comfort with Linux administration
• Ability to explain complex security risks to developers in a way that inspires them to fix it (English is our working language)

What they offer

• Remote-first with flexible working hours — office optional in Berlin-Mitte or up to 90 days a year outside Germany
• Monthly home office allowance and meal subsidy
• 30 vacation days per year
• Budget for learning and development, conferences, and coaching
• High level of ownership and decision-making freedom — no micromanagement
• Access to all Caspar offerings for mental and physical well-being