Security Engineer (m/f/d) at Allgeier Public Gmbh

berlin, Berlin, Germany -

Full Time

Start Date

Immediate

Expiry Date

28 Dec, 26

Salary

85000.0

Posted On

29 Sep, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Industry

Information Technology & Services

Description

Responsibility for vulnerability management in container, Kubernetes, and cloud environments
Analysis, evaluation, and prioritization of vulnerabilities in images, dependencies, and runtime environments
Operation and further development of container scanning solutions as well as assessment of CVEs with regard to risk and exploitability
Definition and implementation of security policies for secure base images and software supply chains
Managing remediation measures in collaboration with development and platform teams
Creation of security reports and monitoring of compliance requirements and security baselines

Several years of experience in vulnerability management as well as with container and image scanning solutions such as Trivy or Grype
Several years of experience with Kubernetes, Docker and securing containerized platforms
Solid understanding of container security, cloud security, and software supply chain security
Experience in assessing and prioritizing CVEs and technical security risks
Knowledge of compliance standards and security baselines (e.g., CIS, BSI, or NIST)
Experience with CI/CD and DevSecOps processes as well as SBOMs, signing and artifact security

Responsibilities

Responsibility for vulnerability management in container, Kubernetes, and cloud environments
Analysis, evaluation, and prioritization of vulnerabilities in images, dependencies, and runtime environments
Operation and further development of container scanning solutions as well as assessment of CVEs with regard to risk and exploitability
Definition and implementation of security policies for secure base images and software supply chains
Managing remediation measures in collaboration with development and platform teams
Creation of security reports and monitoring of compliance requirements and security baselines

Several years of experience in vulnerability management as well as with container and image scanning solutions such as Trivy or Grype
Several years of experience with Kubernetes, Docker and securing containerized platforms
Solid understanding of container security, cloud security, and software supply chain security
Experience in assessing and prioritizing CVEs and technical security risks
Knowledge of compliance standards and security baselines (e.g., CIS, BSI, or NIST)
Experience with CI/CD and DevSecOps processes as well as SBOMs, signing and artifact security