DevSecOps Engineer
TypeFull-time job
LocationGermany
Posted1 hour ago
Revizto enables the people behind the world’s most important structures to do their best work. We connect architects, engineers, contractors, and owners in one shared 2D/3D environment to help deliver complex projects on time and on budget. From airports and hospitals to data centers and large-scale infrastructure, Revizto supports industry leaders in reducing risk, improving collaboration, and delivering better project outcomes.
Built on a gaming engine, Revizto is designed to handle the scale and complexity of modern construction projects while remaining fast, reliable, and accessible across devices and environments — whether teams are in the office or on site.Key Responsibilities & Requirements
Infrastructure Security & Compliance
As a cornerstone of this role, you will ensure our cloud foundations are resilient and compliant
by design.
Design and implement secure cloud infrastructure using Terraform/Terragrunt, following
security best practices and CIS benchmark compliance
Build vulnerability management workflows: scanning, triage, and remediation across
cloud and endpoint estate
Deploy and tune log-aggregation/detection infrastructure for automated incident
response
Design network segmentation for containerized and cloud-native environments.
Expert-level experience with Terraform/Terragrunt across multi-account, multi-region
environments (5+ years preferred)Kubernetes & Container Security
You will lead the hardening of our servers, containerized environments and orchestrate secure
runtime policies.
Design secure Kubernetes cluster bootstrapping, node hardening, and control-plane configuration
Implement Pod Security Standards, network policies, and RBAC via IaC
Establish golden-image programs and container vulnerability scanning/policy enforcement for image registries
Maintain hands-on experience with container runtime security and registry-integrated scanning
CI/CD & Source Code Security
In this capacity, you will integrate security directly into the developer experience and supply chain.
Design secure CI/CD pipeline infrastructure with SAST/DAST integration and security gates
Implement organization-wide GitHub security policies: branch protection, secret scanning, and dependency management
Apply knowledge of supply-chain security controls and automated security testing frameworks
Secrets, Identity & Endpoint Hardening
Manage critical identity infrastructure and enforce rigorous hardening standards across all endpoints
Implement secrets management infrastructure (e.g., HashiCorp Vault) for application and infrastructure credentials
Design IAM across cloud environments and support Zero Trust initiatives
Harden databases (MySQL, PostgreSQL, Redis) against encryption and access-control best practices
Build backup/DR infrastructure with robust encryption and security controls
Core Skills
Technical mastery and a proactive troubleshooting mindset are essential for success in this role.
Proficiency in security automation scripting (Python, Go, or Bash)
Experience in threat modeling and security architecture review
Comfortable owning infrastructure troubleshooting through to incident response
Preferred Qualifications
The ideal candidate brings advanced certifications and experience with specialized security tooling.
Security certifications such as AWS Security Specialty, CISSP, CCSP, or Azure Security Engineer
Experience with container security platforms (e.g., Falco, OPA Gatekeeper, Prisma Cloud) and service mesh security (Istio/Linkerd)
Familiarity with SOAR/security automation platforms and infrastructure penetration testing
Familiarity with GitOps and secure software supply-chain methodologies
Position Overview
DevSecOps Engineer responsible for security-first infrastructure architecture, threat detection, and compliance across our multi-cloud environment, with primary emphasis on AWS. Alibaba Cloud and GCP are expansion targets — current Terraform/Terragrunt modules and CIS benchmark tooling are AWS-only; this role will help build out equivalent coverage for the other platforms. Owns secure IaC delivery, Kubernetes/container security, and CI/CD supply-chain security.Why Join Us
Recognised as one of Switzerland’s Best Managed Companies by Deloitte for three consecutive years from 2024 through
Company-wide trips, including Armenia in 2023 and Switzerland in 2025, with more to come
A flexible, employee-focused culture
An innovative and collaborative team environment
Great working conditions designed to support your best work
We can only accept applications from candidates based in Germany, France or the UK.Originally posted on Himalayas
Built on a gaming engine, Revizto is designed to handle the scale and complexity of modern construction projects while remaining fast, reliable, and accessible across devices and environments — whether teams are in the office or on site.Key Responsibilities & Requirements
Infrastructure Security & Compliance
As a cornerstone of this role, you will ensure our cloud foundations are resilient and compliant
by design.
Design and implement secure cloud infrastructure using Terraform/Terragrunt, following
security best practices and CIS benchmark compliance
Build vulnerability management workflows: scanning, triage, and remediation across
cloud and endpoint estate
Deploy and tune log-aggregation/detection infrastructure for automated incident
response
Design network segmentation for containerized and cloud-native environments.
Expert-level experience with Terraform/Terragrunt across multi-account, multi-region
environments (5+ years preferred)Kubernetes & Container Security
You will lead the hardening of our servers, containerized environments and orchestrate secure
runtime policies.
Design secure Kubernetes cluster bootstrapping, node hardening, and control-plane configuration
Implement Pod Security Standards, network policies, and RBAC via IaC
Establish golden-image programs and container vulnerability scanning/policy enforcement for image registries
Maintain hands-on experience with container runtime security and registry-integrated scanning
CI/CD & Source Code Security
In this capacity, you will integrate security directly into the developer experience and supply chain.
Design secure CI/CD pipeline infrastructure with SAST/DAST integration and security gates
Implement organization-wide GitHub security policies: branch protection, secret scanning, and dependency management
Apply knowledge of supply-chain security controls and automated security testing frameworks
Secrets, Identity & Endpoint Hardening
Manage critical identity infrastructure and enforce rigorous hardening standards across all endpoints
Implement secrets management infrastructure (e.g., HashiCorp Vault) for application and infrastructure credentials
Design IAM across cloud environments and support Zero Trust initiatives
Harden databases (MySQL, PostgreSQL, Redis) against encryption and access-control best practices
Build backup/DR infrastructure with robust encryption and security controls
Core Skills
Technical mastery and a proactive troubleshooting mindset are essential for success in this role.
Proficiency in security automation scripting (Python, Go, or Bash)
Experience in threat modeling and security architecture review
Comfortable owning infrastructure troubleshooting through to incident response
Preferred Qualifications
The ideal candidate brings advanced certifications and experience with specialized security tooling.
Security certifications such as AWS Security Specialty, CISSP, CCSP, or Azure Security Engineer
Experience with container security platforms (e.g., Falco, OPA Gatekeeper, Prisma Cloud) and service mesh security (Istio/Linkerd)
Familiarity with SOAR/security automation platforms and infrastructure penetration testing
Familiarity with GitOps and secure software supply-chain methodologies
Position Overview
DevSecOps Engineer responsible for security-first infrastructure architecture, threat detection, and compliance across our multi-cloud environment, with primary emphasis on AWS. Alibaba Cloud and GCP are expansion targets — current Terraform/Terragrunt modules and CIS benchmark tooling are AWS-only; this role will help build out equivalent coverage for the other platforms. Owns secure IaC delivery, Kubernetes/container security, and CI/CD supply-chain security.Why Join Us
Recognised as one of Switzerland’s Best Managed Companies by Deloitte for three consecutive years from 2024 through
Company-wide trips, including Armenia in 2023 and Switzerland in 2025, with more to come
A flexible, employee-focused culture
An innovative and collaborative team environment
Great working conditions designed to support your best work
We can only accept applications from candidates based in Germany, France or the UK.Originally posted on Himalayas
Apply on Himalayas →
Job sourced from Himalayas. Applications happen directly on the original platform — we never collect your data.