Senior DevSecOps Engineer; m​/f​/d

As Europe's leading online pharmacy, Redcare Pharmacy is driven by our dedicated teams and cutting-edge innovation. We strive to create an enjoyable and collaborative working environment where every employee feels comfortable and is motivated to contribute to our vision:

As Senior, Dev Sec Ops  Engineering within our Data & AI organization, you’ll help us make security an integral part of how we develop and deploy applications. Working closely with MLOps, Data Science, AI and Engineering teams, you’ll combine hands-on security engineering with practical guidance, strengthening security across the development lifecycle and helping teams address new and emerging security challenges.

Our security and development landscape includes Git Hub / Git Hub Actions, Azure Dev Ops, Kubernetes, Terraform and Python, alongside Azure services such as Entra  (AAD), Key Vault, Azure Policy, Defender for Cloud and Microsoft Sentinel. For application, container and infrastructure security, we work with technologies and approaches including Aikido, Trivy, CodeQL, Dependabot, Checkov/tfsec and OPA/Gatekeeper or Kyverno. Our Data & AI environment also includes Databricks, Unity Catalog and MLflow.

While this is a remote position based in Germany, it may require occasional on-site collaboration at our offices in Berlin or Cologne, depending on business and team requirements.

About your tasks:

• Build and maintain secure CI/CD pipelines, embedding security testing and controls into software development and deployment while enabling engineering teams to work efficiently and securely.
• Strengthen application and cloud-native security, working hands‑on with development teams across Kubernetes and containerized environments to identify risks and implement practical security controls.
• Enable secure development across Data & AI by translating security requirements into practical guardrails, standards and solutions that AI/ML, MLOps and Data Science teams can apply in their day‑to‑day development.
• CVE & vulnerability management: continuously identify and assess vulnerabilities, support their prioritization and work closely with application teams on practical mitigation and remediation.
• Monitoring, security & continuous improvement: contribute to security testing, rollout and observability, advise teams when new security issues arise, and explore tooling and automation that can further strengthen application security.

About you:

• You bring strong hands‑on experience as a Dev Sec Ops  / Application Security Engineer, with the depth to secure applications and software development across cloud-native and Kubernetes environments.
• You operate at a Senior/Staff level, with the technical depth and independence to own complex security topics and translate security requirements into practical solutions for engineering teams.
• You have hands‑on experience with CI/CD security and Git Hub, Git Lab or comparable tooling, including automating security guardrails, testing and checks within development pipelines.
• You bring solid expertise in application and cloud-native security, including Kubernetes/container security, vulnerability management and CVEs, security scanning, triage/prioritization and remediation workflows.
• You have a shift‑left mindset and enjoy working closely with developers to embed security into how software is developed and deployed. Experience with Python and Data & AI/ML environments is a plus.

In order to provide our employees with the best possible support for their individual needs, we offer a wide range of benefits:

• Work from Home:
  If your job does not require you to be present in the office, we can…