Product Security / DevSecOps Engineer (all genders)

How You Will Create ImpactAs a Product Security / DevSecOps Engineer, you are part of SWIAT’s DevOps team and you will strengthen security across SWIAT's software development and IT operations. You will work closely with our Development teams and take technical ownership of security throughout the software development lifecycle, from architecture and implementation to CI/CD, cloud infrastructure and production operations. This is a hands-on engineering role. You will establish security practices, implement security tooling and controls, identify vulnerabilities and help our engineering teams build and operate secure financial market infrastructure. Your Tasks and Responsibilities IncludeEstablishing and continuously improving our Secure Software Development Lifecycle (SSDLC)Performing security architecture reviews and threat modelling for applications and infrastructureIntegrating security controls and automated security testing into CI/CD pipelinesImplementing and operating SAST, DAST, Software Composition Analysis (SCA), container and infrastructure scanningManaging technical vulnerabilities and supporting engineering teams with remediationHardening Kubernetes, container, Linux and cloud environmentsReviewing Infrastructure as Code and Kubernetes configurations from a security perspectiveDesigning and improving IAM, secrets management, KMS/HSM and PKI conceptsDefining and implementing security baselines for applications and infrastructureSupporting secure software supply chain practices, including dependency management and SBOMCoordinating penetration tests and supporting remediation of identified findingsSupporting technical investigation and response to security incidentsAdvising Development, DevOps and Architecture teams on technical security topicsIncreasing security awareness within engineering teams through guidelines, reviews and knowledge sharingSupporting security-related requirements arising from ISO 27001, DORA and our financial-industry environment Your Profile and RequirementsEducation & Experience BA/MA in Computer Science, Information Security, Software Engineering or a comparable field, or equivalent professional experienceSeveral years of hands-on experience in DevSecOps, Product Security, Application Security or Security EngineeringStrong software engineering or DevOps backgroundExperience securing production environments and modern software delivery pipelines Skills & Competencies Secure Software Development Lifecycle and secure coding practicesThreat modelling and security architectureCI/CD security and security automationSAST, DAST and Software Composition AnalysisVulnerability managementKubernetes and container securityLinux and networkingCloud security, preferably Azure and/or AWSIAM and secrets managementStrong understanding of applied cryptography, KMS, HSM and PKI conceptsInfrastructure as Code, preferably Terraform and AnsibleGit-based development and CI/CD environments, preferably GitlabSoftware supply chain security and SBOM conceptsProgramming or scripting experience, preferably JavaScript / TypeScript, Python, Go or similarISO 27001 and DORA knowledge is a strong advantageExperience in financial services or regulated environments is a strong advantageBlockchain and Ethereum/EVM security knowledge is a plusGood English skills ⚠️ Please be advised that a valid work permit for Germany is required for non-EU citizens. Unfortunately, applications without a valid working permit and sufficient language skills will not be considered. About SWIATSWIAT GmbH is a Frankfurt-based FinTech building next-generation financial market infrastructure using Distributed Ledger Technology (DLT). Our mission is to enable secure, compliant, and efficient issuance, trading, settlement, and servicing of digital and traditional financial assets on a global scale. What do we do?Coordinate and operate the SWIAT Network and Platform, a secure and trusted DLT-based financial infrastructureEnable the issuance and lifecycle management of regulated digital assetsSupport the tokenisation and mobilization of traditional financial instruments and collateralDeliver solutions tailored to banks, financial institutions, and capital market participantsDrive innovation in digital securities, settlement, and collateral management Place of Work and CompensationOur office is located in the centre of Frankfurt. We support flexible and hybrid working models and value regular in-person collaboration to maintain strong team connections. We offer a competitive compensation package together with additional employee benefits. Did we catch your interest? Apply now and join our mission!