Senior Security Engineer / DevSecOps Engineer

Join our Zurich-based Software Development Center team! Explore opportunities in a dynamic work environment.

Tasks

• Lead design and maintenance of DevSecOps pipelines and infrastructure.
• Integrate security practices into CI/CD with automated testing.
• Collaborate with teams to promote shared responsibility for security., Our Software Development Center (SWDC) engages in the research, design, and development of software applications across all divisions. We are looking for a passionate and experienced security expert who thrives in a dynamic environment and enjoys tackling challenging problems. For our global operating headquarters in Zurich, Greifensee, we are looking for a motivated:Senior Security Engineer / DevSecOps Engineer 100% (all genders)In this role, your responsibilities would include:You lead the design, implementation, and maintenance of DevSecOps pipelines and infrastructure.You integrate security practices seamlessly into the CI/CD process, including automated security testing and vulnerability management.You collaborate closely with development, security, and operations teams to promote a culture of shared responsibility for security and quality.You drive the adoption of best practices, tools, and frameworks related to DevSecOps across the organization.You identify risks, provide mitigation strategies, and ensure compliance with industry standards and regulations.You monitor system performance and security incidents while implementing necessary corrective measures.You develop and perform project-specific security risk assessments together with local subject matter experts.You review feature designs to identify potential security flaws in technical designs involving C#, JavaScript (Vue), SQL Server, Kubernetes, Docker, and Azure DevOps. Display original ad

• Experience in security engineering and DevSecOps methodologies required.
• Proficient in C#, JavaScript (Vue), SQL Server, and Azure DevOps.
• Strong understanding of Kubernetes, Docker, and security compliance.