Product Security / DevSecOps Engineer (all genders)

As a Product Security / DevSecOps Engineer, you are part of SWIAT’s DevOps team and you will strengthen security across SWIAT’s software development and IT operations.

You will work closely with our Development teams and take technical ownership of security throughout the software development lifecycle, from architecture and implementation to CI/CD, cloud infrastructure and production operations.

This is a hands-on engineering role. You will establish security practices, implement security tooling and controls, identify vulnerabilities and help our engineering teams build and operate secure financial market infrastructure.

Your Tasks and Responsibilities Include

• Establishing and continuously improving our Secure Software Development Lifecycle (SSDLC)
• Performing security architecture reviews and threat modelling for applications and infrastructure
• Integrating security controls and automated security testing into CI/CD pipelines
• Implementing and operating SAST, DAST, Software Composition Analysis (SCA), container and infrastructure scanning
• Managing technical vulnerabilities and supporting engineering teams with remediation
• Hardening Kubernetes, container, Linux and cloud environments
• Reviewing Infrastructure as Code and Kubernetes configurations from a security perspective
• Designing and improving IAM, secrets management, KMS/HSM and PKI concepts
• Defining and implementing security baselines for applications and infrastructure
• Supporting secure software supply chain practices, including dependency management and SBOM
• Coordinating penetration tests and supporting remediation of identified findings
• Supporting technical investigation and response to security incidents
• Advising Development, DevOps and Architecture teams on technical security topics
• Increasing security awareness within engineering teams through guidelines, reviews and knowledge sharing
• Supporting security-related requirements arising from ISO 27001, DORA and our financial-industry environment

• BA/MA in Computer Science, Information Security, Software Engineering or a comparable field, or equivalent professional experience
• Several years of hands-on experience in DevSecOps, Product Security, Application Security or Security Engineering
• Strong software engineering or DevOps background
• Experience securing production environments and modern software delivery pipelines

Skills & Competencies

• Secure Software Development Lifecycle and secure coding practices
• Threat modelling and security architecture
• CI/CD security and security automation
• SAST, DAST and Software Composition Analysis
• Vulnerability management
• Kubernetes and container security
• Linux and networking
• Cloud security, preferably Azure and/or AWS
• IAM and secrets management
• Strong understanding of applied cryptography, KMS, HSM and PKI concepts
• Infrastructure as Code, preferably Terraform and Ansible
• Git-based development and CI/CD environments, preferably Gitlab
• Software supply chain security and SBOM concepts
• Programming or scripting experience, preferably JavaScript / TypeScript, Python, Go or similar
• ISO 27001 and DORA knowledge is a strong advantage
• Experience in financial services or regulated environments is a strong advantage
• Blockchain and Ethereum/EVM security knowledge is a plus
• Good English skills

️ Please be advised that a valid work permit for Germany is required for non-EU citizens. Unfortunately, applications without a valid working permit and sufficient language skills will not be considered.

SWIAT GmbH is a Frankfurt-based FinTech building next-generation financial market infrastructure using Distributed Ledger Technology (DLT). Our mission is to enable secure, compliant, and efficient issuance, trading, settlement, and servicing of digital and traditional financial assets on a global scale.

What do we do?

• Coordinate and operate the SWIAT Network and Platform, a secure and trusted DLT-based financial infrastructure
• Enable the issuance and lifecycle management of regulated digital assets
• Support the tokenisation and mobilization of traditional financial instruments and collateral
• Deliver solutions tailored to banks, financial institutions, and capital market participants
• Drive innovation in digital securities, settlement, and collateral management

Place of Work and Compensation

Our office is located in the centre of Frankfurt. We support flexible and hybrid working models and value regular in-person collaboration to maintain strong team connections.

We offer a competitive compensation package together with additional employee benefits.