<div class="show-more-less-html__markup show-more-less-html__markup--clamp-after-5 relative overflow-hidden"> <strong>About Codesphere<br/><br/></strong>Codesphere is a <em>Virtual Cloud Provider</em> from Germany building the future of sovereign cloud infrastructure. Our platform gives enterprises and governments full sovereignty without giving up modern cloud capability – a vision recently validated by a series of multi-million European government tenders.<br/><br/>Since our founding in Karlsruhe in 2020, we’ve expanded into an international team of 60+ experts. Based in Karlsruhe and Munich and backed by top-tier investors, we are chasing a bold vision.<br/><br/><strong>We’re scaling fast and would love for you to join us and grow alongside us 🚀<br/><br/></strong><strong>About The Role<br/><br/></strong>Codesphere runs cloud infrastructure that enterprises and governments depend on – security is not an afterthought, it's a foundation. As a <strong>Senior Security &amp; Compliance Engineer (m/f/d)</strong>, you own the security posture of our platform: from vulnerability management and incident response to compliance frameworks and developer enablement.<br/><br/>What you'll drive<br/><br/><ul><li>You conduct security assessments, penetration testing, and vulnerability scanning – and drive remediation with development teams</li><li>You manage security scanning tooling (DAST/SAST) and perform security code reviews</li><li>You design and implement security controls across our full technology stack, defining and enforcing standards for development, infrastructure, and data</li><li>You integrate security into our CI/CD pipelines and development processes – Shift Left and DevSecOps in practice, not just on paper</li><li>You develop and maintain our Security Incident Response Plan, monitor security logs via SIEM, and lead forensic analysis when needed</li><li>You ensure compliance with relevant standards and regulations – including GDPR and ISO 27001</li><li>You manage IAM systems with a least privilege approach</li><li>You develop and deliver security awareness training for the whole company – and specialised secure coding training for engineering teams<br/><br/></li></ul>What makes you a great fit<br/><br/><ul><li>5+ years in a security engineering or similar role, ideally in a cloud or SaaS environment</li><li>Hands-on experience with penetration testing, vulnerability management, and DAST/SAST tooling</li><li>Solid understanding of DevSecOps principles and CI/CD security integration</li><li>Familiarity with SIEM tools, incident response, and forensic analysis</li><li>Knowledge of relevant compliance frameworks – GDPR, ISO 27001, and ideally BSI IT-Grundschutz</li><li>Strong communicator – able to translate security risks into clear guidance for both technical and non-technical audiences</li><li>Fluent in English; German is a strong plus given the nature of our compliance landscape<br/><br/></li></ul>What's in it for you<br/><br/><ul><li>30+ vacation days – including Christmas Eve and New Year's Eve, adding up to 32 days per year</li><li>Meal allowance – up to 15 digital meal vouchers per month, worth up to €7.67 each</li><li>Flexibility – hybrid work setup with mobile work options and flexibility around core hours</li><li>Steep learning curve – fast-moving environment, real ownership, and a front-row seat to scaling a company</li><li>Job-Rad – lease a bike through us, tax-free</li><li>Gym access – stay active on site (Karlsruhe office only)</li><li>Employee events – from team offsites to regular get-togethers</li><li>Company pension scheme – company-supported pension to set you up for later</li><li>Great public transport links – both offices are within walking distance of tram and metro stops<br/><br/></li></ul> </div>