Security Engineer Container Platform

• You advise on the security of the container platform and the applications developed and deployed on it.
• You implement and monitor security best practices within a container environment.
• You perform threat modeling and help teams identify potential threats and vulnerabilities early on.
• You integrate security controls into DevSecOps and CI/CD processes.
• You work with security tools for SAST, DAST, vulnerability scanning, and compliance controls, among others.
• You support the use and further development of a Cloud-Native Application Protection Platform.
• You assist in setting up, implementing, and monitoring runtime policies.
• You detect and manage vulnerabilities in containers and container images.
• You analyze security risks and propose appropriate measures to mitigate these risks.
• You guide and coach developers and technical colleagues on secure development and container security.
• You explain security measures to both technical and non-technical stakeholders.
• You collaborate with various internal and external partners and represent security within a multidisciplinary team.
• You take initiative and responsibility for security issues within the container landscape.

What they ask

• Demonstrable professional experience in IT security.
• Experience with container technology and container platforms.
• Good knowledge of Kubernetes.
• Preferably experience with Red Hat OpenShift 4.
• Experience with Cloud-Native Application Protection Platforms, including reporting, runtime policies, and compliance controls.
• Familiarity with threat modeling, preferably according to the STRIDE methodology.
• Experience with DevSecOps and integrating security into software development processes.
• Knowledge of CI/CD pipelines, preferably within GitLab CI.
• Experience with SAST and DAST tools.
• Knowledge of vulnerability management and detecting and tracking vulnerabilities in container images.
• Broad knowledge of IT systems, networks, storage, and application technologies.
• Familiarity with current IT risks and experience implementing security solutions to mitigate these risks.
• Knowledge of cloud technologies such as Azure, AWS, and/or GCP and understanding of the security risks and considerations of cloud environments.
• Practical scripting experience.
• Relevant cloud or security certifications are a plus.

• You not only understand security technically but are also able to engage others in a secure way of working.
• You are diplomatically assertive and dare to clearly defend security positions.
• You remain pragmatic and seek solutions together with developers.