Senior Security and Compliance Engineer (m/f/d)

<h2>About Codesphere</h2><p style="min-height:1.5em">Codesphere is a <em>Virtual Cloud Provider</em> from Germany building the future of sovereign cloud infrastructure. Our platform gives enterprises and governments full sovereignty without giving up modern cloud capability – a vision recently validated by a series of multi-million European government tenders.</p><p style="min-height:1.5em">Since our founding in Karlsruhe in 2020, we’ve expanded into an international team of 60+ experts. Based in Karlsruhe and Munich and backed by top-tier investors, we are chasing a bold vision.</p><p style="min-height:1.5em"><strong>We’re scaling fast and would love for you to join us and grow alongside us 🚀</strong></p><p style="min-height:1.5em"></p><h2>About the role</h2><p style="min-height:1.5em">Codesphere runs cloud infrastructure that enterprises and governments depend on – security is not an afterthought, it's a foundation. As a <strong>Senior Security &amp; Compliance Engineer (m/f/d)</strong>, you own the security posture of our platform: from vulnerability management and incident response to compliance frameworks and developer enablement.</p><p style="min-height:1.5em"></p><h2>What you'll drive</h2><ul style="min-height:1.5em"><li><p style="min-height:1.5em">You conduct security assessments, penetration testing, and vulnerability scanning – and drive remediation with development teams</p></li><li><p style="min-height:1.5em">You manage security scanning tooling (DAST/SAST) and perform security code reviews</p></li><li><p style="min-height:1.5em">You design and implement security controls across our full technology stack, defining and enforcing standards for development, infrastructure, and data</p></li><li><p style="min-height:1.5em">You integrate security into our CI/CD pipelines and development processes – Shift Left and DevSecOps in practice, not just on paper</p></li><li><p style="min-height:1.5em">You develop and maintain our Security Incident Response Plan, monitor security logs via SIEM, and lead forensic analysis when needed</p></li><li><p style="min-height:1.5em">You ensure compliance with relevant standards and regulations – including GDPR and ISO 27001</p></li><li><p style="min-height:1.5em">You manage IAM systems with a least privilege approach</p></li><li><p style="min-height:1.5em">You develop and deliver security awareness training for the whole company – and specialised secure coding training for engineering teams</p></li></ul><p style="min-height:1.5em"></p><h2>What makes you a great fit</h2><ul style="min-height:1.5em"><li><p style="min-height:1.5em">5+ years in a security engineering or similar role, ideally in a cloud or SaaS environment</p></li><li><p style="min-height:1.5em">Hands-on experience with penetration testing, vulnerability management, and DAST/SAST tooling</p></li><li><p style="min-height:1.5em">Solid understanding of DevSecOps principles and CI/CD security integration</p></li><li><p style="min-height:1.5em">Familiarity with SIEM tools, incident response, and forensic analysis</p></li><li><p style="min-height:1.5em">Knowledge of relevant compliance frameworks – GDPR, ISO 27001, and ideally BSI IT-Grundschutz</p></li><li><p style="min-height:1.5em">Strong communicator – able to translate security risks into clear guidance for both technical and non-technical audiences</p></li><li><p style="min-height:1.5em">Fluent in English; German is a strong plus given the nature of our compliance landscape</p></li></ul><p style="min-height:1.5em"></p><h2>What's in it for you</h2><ul style="min-height:1.5em"><li><p style="min-height:1.5em">32 days of paid time off – <em>30 regular vacation days plus Christmas Eve and New Year's Eve off</em></p></li><li><p style="min-height:1.5em">Meal allowance – <em>up to 15 digital vouchers per month, adding up to over €100 net for you</em></p></li><li><p style="min-height:1.5em">Flexibility – <em>hybrid work setup with mobile work options and flexibility around core hours</em></p></li><li><p style="min-height:1.5em">Steep learning curve – <em>fast-moving environment, real ownership, and a front-row seat to scaling a company</em></p></li><li><p style="min-height:1.5em">Job-Rad – <em>lease a bike through us, tax-free</em></p></li><li><p style="min-height:1.5em">Gym access – <em>stay active on site (Karlsruhe office only)</em></p></li><li><p style="min-height:1.5em">Employee events – <em>from team offsites to regular get-togethers</em></p></li><li><p style="min-height:1.5em">Company pension scheme – <em>company-supported pension to set you up for later</em></p></li><li><p style="min-height:1.5em">Great public transport links – <em>both offices are within walking distance of tram and metro stops</em></p></li></ul><div style="min-height:1.2em;margin-top:0;margin-bottom:0"> </div><p>Find more <a href="https://www.arbeitnow.com/english-speaking-jobs">English Speaking Jobs in Germany</a> on Arbeitnow</a>