Working Student - Application & Infrastructure Security (DevSecOps)

We are looking for a motivated working student (f/m/d) to join the GEA Digital security team and help shape the security posture of our digital platforms across the DigiHub. You will work hands-on with our security platform (Aikido), modern DevOps tooling, and cutting-edge topics like Agentic AI and AI-powered penetration testing - while collaborating with DevOps, InfoSec, ITSec and application owners across divisions.

• Security Research, Planning & Implementation: Drive software (application and infrastructure) security research and implementation using Aikido, the security platform for GEA Digital, including analysis of InfoSec security reports
• Stakeholder Coordination: Support coordination with the DevOps team, solution/application owners, InfoSec, ITSec and the CAF team to deliver the DigiHub / cross-divisional security strategy framework
• Security Posture Ownership: Co-own the security posture for the Aikido organizations (Eureka, IIoT, DigiHub)
• Daily Security Operations: Perform daily checks on security dashboards, PR gates, and SLA management for issues in your responsible workspaces
• Tooling Development: Develop and test security tools, applications and scripts to enable security assessments for responsible teams and applications

Project Support

• Support the adoption of the DigiHub-wide Security Strategy Framework
• Contribute to the AI-Pentest Development Tool initiative
• SIEM Integration for SoC Team

Your Learning Curve

• Agentic AI secure development
• Red teaming and offensive security
• Designing secure systems architecture
• Hands-on Azure cloud security experience with microservices and scalable infrastructure (AKS)

Field of Study

• MS in Computer Science / Engineering - a major in Computer Networking and Security or a related field is preferable

Skills & Tools

• Solid knowledge of core CS areas: Data Structures & Algorithms, Computer Networks, Operating Systems, DBMS and Computer Security
• Strong understanding of OOP concepts, system design and distributed systems
• Knowledge of at least one public cloud platform (Azure preferred)
• Working proficiency (reading, understanding, writing) in at least one modern programming language
• Good to have: understanding of IIoT security standards (IEC 62443) and GDPR compliance
• Plus: experience with the DevOps/SRE toolchain (Argo CD, Loki, GitHub Actions, Grafana, Prometheus, etc.)
• Plus: foundational understanding of Agentic and Generative AI

Languages

• Strong English speaking and writing skills (C1 minimum, required); German is a plus