Security Engineer - DevSecOps & SDLC Security (f/m/d) at Allianz Technology

Frankfurt, Hesse, Germany -

Full Time

Start Date

Immediate

Expiry Date

20 Dec, 25

Salary

0.0

Posted On

21 Sep, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

SDLC Security, Application Security, DevSecOps, CI/CD Pipelines, GitHub, JFrog, Terraform Cloud, Bicep, Ansible, Cloud Security Principles, Open Policy Agent, Microsoft's Well-Architected Framework, CIS Benchmarks, Security Testing Tools, Vulnerability Management, Regulated Environments, Communication Skills

Industry

Financial Services

Description

Security Engineer – DevSecOps & SDLC Security (f/m/d) Join us. Let’s care for tomorrow. At Allianz Global Investors we foster a culture of professionalism, fulfilment, and an inclusive working environment. Do you want to be part of a leading active asset management company? Then join us now! This position is part of AllianzGI’s Development, Test & Transformation (DTT) team, which leads the delivery of secure, resilient, and scalable technology across a global hybrid cloud environment. The role centers on integrating security throughout the software development lifecycle (SDLC), cloud-native infrastructure, and automation platforms. Core responsibilities include implementing robust technical controls, evaluating and integrating security tools into developer workflows, advising engineering teams and security champions, and ensuring alignment with regulatory and internal compliance frameworks. The position places strong emphasis on infrastructure-as-code practices and AI-driven enhancements to developer experience, while also playing a key role in audit preparedness and cross-functional collaboration. This role is based in our Frankfurt or Munich office. What you will do Implement and oversee security controls across SDLC and infrastructure layers Test-drive and evaluate security tools for integration into CI/CD pipelines and developer workflows Advise development teams and security champions on the secure use of provided tools and platforms Define and enforce secure SDLC practices aligned with DORA, KAIT, BAIT, and AllianzGI’s internal frameworks Apply security best practices to cloud-native infrastructure, with emphasis on Microsoft’s Well-Architected Framework Secure and govern Infrastructure as Code (IaC) using Terraform Cloud, Bicep, and Ansible Implement policy-as-code using Open Policy Agent (OPA) across infrastructure and pipelines Automate security controls, evidence generation, and release promotion workflows Champion security-by-design principles across architecture, development, and operations Collaborate with governance, application, and infrastructure teams to map technologies to compliance controls Contribute to the Security Champion Community of Practice (CoP) Apply CIS Benchmarks to harden systems and validate configurations Support compliance dashboards and DORA metrics implementation in our IDP Optionally contribute to areas such as Kubernetes, Azure role assignments, VM usage, and private endpoint architecture Serve as a sparring partner for internal and external auditors, working closely with internal process and application owners to ensure alignment of technical controls with audit and compliance expectations. What you bring 5+ years of experience in SDLC security, application security, or DevSecOps Hands-on experience with CI/CD pipelines, GitHub, and JFrog Strong knowledge of Terraform Cloud, Bicep, Ansible, and cloud security principles Familiarity with Open Policy Agent (OPA), Microsoft’s Well-Architected Framework, and CIS Benchmarks Experience with security testing tools and vulnerability management Proven ability to operate effectively in regulated environments (DORA, KAIT, BAIT) Excellent communication skills across technical and business stakeholders Fluent in English; additional languages are a plus. Preferred: Degree in Information Technology or a related field Certifications such as CSSLP, GCSA, AZ-500, CISSP, CISM, or CISA Experience with internal developer platforms (IDPs) and platform engineering Exposure to Agile environments and enterprise transformation programs Familiarity with AI-enhanced developer workflows and their security implications. What we offer We empower our employees by ensuring flexible work arrangements that maintain a balance between performance, productivity, career development and personal priorities (e.g., hybrid model/ flexible working hours) Securing your future: Access to company pension/savings plans Shared success: Company share purchasing plan Support for what matters: Mental health and wellbeing programs Investments in your career: Career opportunities within the entire Allianz Group Investments in your skills: Comprehensive learning and development offerings, including certifications and professional qualifications … and so much more! About Allianz Global Investors Allianz Global Investors is a leading global active asset manager. We invest for the long term and want to create value for clients every step of the way. We do this by being active – in how we partner with clients and anticipate their needs, and build solutions based on capabilities across public and private markets. Our focus on enhancing our clients’ assets leads naturally to a commitment to sustainability for positive change. Our goal is to enhance the investment experience for clients, whatever their location or goals. Putting our clients' needs first, behaving in a transparent way and treating people fairly means acting with integrity. We encourage a collegial culture, that supports individual responsibility. We invest in the development of our employees to maximize the power of innovation. We at Allianz believe in a diverse and inclusive workforce, we are committed to the principles of Equal Employment Opportunity and to helping applicants with any disabilities. We encourage you to bring your whole self to work, no matter where you are from, what you look like, who you love or what you believe in. We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, disability or sexual orientation. Great to have you on board. If you feel inspired to promote the active asset management experience, this is the place for you. Join our diverse, international, technology-enabled, and agile environment. Simply upload your CV in English to apply for this position! If you need support to navigate our websites or at any stage during your application, please send an email with your request to recruiting@allianzgi.com

Responsibilities

The role involves implementing and overseeing security controls across the software development lifecycle and infrastructure layers, as well as evaluating and integrating security tools into developer workflows. Additionally, the position requires advising engineering teams on secure practices and ensuring compliance with regulatory frameworks.