> Markdown version of [/jobs/ext/2065971-product-security-devsecops-engineer-all-genders](https://www.wearedevelopers.com/jobs/ext/2065971-product-security-devsecops-engineer-all-genders). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Product Security / DevSecOps Engineer (all genders)

- **Company:** SWIAT GmbH
- **Location:** Frankfurt am Main, Germany
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, JavaScript (Programming Language), Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Computer Programming, Continuous Integration, Linux, DevOps, Identity and Access Management, Information Technology Operations, Python (Programming Language), Key Management, Public Key Infrastructure, Ansible, Blockchain, Secure Coding, Security Software, Software Engineering, Systems Integration, TypeScript, Software Vulnerability Management, Scripting, Cloud Platform System, Delivery Pipeline, Software Security, Gitlab, Git, Kubernetes, Information Technology, Ethereum, CIS Benchmarks, Terraform, Devsecops, Security Orchestration, Automation & Response, Static Application Security Testing, Golang, Dynamic Application Security Testing
- **Published:** August 15, 2026
- **Apply:** https://www.adzuna.de/details/5841735594

## About the Role

* BA/MA in Computer Science, Information Security, Software Engineering or a comparable field, or equivalent professional experience
 * Several years of hands-on experience in DevSecOps, Product Security, Application Security or Security Engineering
 * Strong software engineering or DevOps background
 * Experience securing production environments and modern software delivery pipelines

Skills & Competencies

 * Secure Software Development Lifecycle and secure coding practices
 * Threat modelling and security architecture
 * CI/CD security and security automation
 * SAST, DAST and Software Composition Analysis
 * Vulnerability management
 * Kubernetes and container security
 * Linux and networking
 * Cloud security, preferably Azure and/or AWS
 * IAM and secrets management
 * Strong understanding of applied cryptography, KMS, HSM and PKI concepts
 * Infrastructure as Code, preferably Terraform and Ansible
 * Git-based development and CI/CD environments, preferably Gitlab
 * Software supply chain security and SBOM concepts
 * Programming or scripting experience, preferably JavaScript / TypeScript, Python, Go or similar
 * ISO 27001 and DORA knowledge is a strong advantage
 * Experience in financial services or regulated environments is a strong advantage
 * Blockchain and Ethereum/EVM security knowledge is a plus
 * Good English skills

️ Please be advised that a valid work permit for Germany is required for non-EU citizens. Unfortunately, applications without a valid working permit and sufficient language skills will not be considered.

## Description

As a Product Security / DevSecOps Engineer, you are part of SWIAT's DevOps team and you will strengthen security across SWIAT's software development and IT operations.

You will work closely with our Development teams and take technical ownership of security throughout the software development lifecycle, from architecture and implementation to CI/CD, cloud infrastructure and production operations.

This is a hands-on engineering role. You will establish security practices, implement security tooling and controls, identify vulnerabilities and help our engineering teams build and operate secure financial market infrastructure.

Your Tasks and Responsibilities Include

 * Establishing and continuously improving our Secure Software Development Lifecycle (SSDLC)
 * Performing security architecture reviews and threat modelling for applications and infrastructure
 * Integrating security controls and automated security testing into CI/CD pipelines
 * Implementing and operating SAST, DAST, Software Composition Analysis (SCA), container and infrastructure scanning
 * Managing technical vulnerabilities and supporting engineering teams with remediation
 * Hardening Kubernetes, container, Linux and cloud environments
 * Reviewing Infrastructure as Code and Kubernetes configurations from a security perspective
 * Designing and improving IAM, secrets management, KMS/HSM and PKI concepts
 * Defining and implementing security baselines for applications and infrastructure
 * Supporting secure software supply chain practices, including dependency management and SBOM
 * Coordinating penetration tests and supporting remediation of identified findings
 * Supporting technical investigation and response to security incidents
 * Advising Development, DevOps and Architecture teams on technical security topics
 * Increasing security awareness within engineering teams through guidelines, reviews and knowledge sharing
 * Supporting security-related requirements arising from ISO 27001, DORA and our financial-industry environment


## Related Videos

- [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More](https://www.wearedevelopers.com/videos/1805-wearedevelopers-live-modern-devops-for-iot-devices-and-more)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security)
- [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews)

## Related Articles

- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies)
- [Where to Find German Tech Jobs](https://www.wearedevelopers.com/magazine/366-where-to-find-german-tech-jobs)
- [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs)