Job Description
We are looking for a DevSecOps Engineer (Junior to Medior level) to join our Payment team, which is responsible for the complete payment lifecycle, from customers first placing their orders within the Checkout to handling the refund of a returned item weeks later.
Between these two points, the team interacts with a multitude of internal and external players, spanning from internal business to other tech teams and multiple payment providers in a variety of countries. The applications the Payment team maintains span from high traffic & fault tolerance API hubs to security-conscious and reliable backend processing engines, where you will contribute to maintaining and improving our infrastructure and security practices while further developing your expertise
What will you do
- Contribute to maintaining and improving our AWS infrastructure using IaC.
- Support automation of deployment workflows using tools like GitLabCI and Terraform, and help maintain documentation of infrastructure configurations and operational processes.
- Assist in developing and implementing monitoring solutions across integration, staging, and live environments to help identify and resolve issues, and respond to system alerts and incidents.
- Learn and stay updated on industry trends, evaluate new technologies together with the team, and help apply security best practices to ensure compliance with relevant standards and regulations.
- Help develop and maintain cloud security solutions, supporting the integration of security best practices into company processes.
- Support patching activities across the infrastructure and tech stack to minimize vulnerabilities.
- Assist in auditing and securing Kubernetes and AWS environments, helping to identify misconfigurations and mitigate security risks.
- Contribute to automating security controls in CI/CD pipelines and assist in implementing SAST/DAST for secure development.
- Help scan Git repositories for potential credential leaks and support improvements in security monitoring.
- Collaborate with teams on security initiatives and participate in cybersecurity audits.
- Stay curious and proactive about emerging threats, and learn how to enhance cloud and application security with guidance from senior team members.
Who you are
- 1–3 years of professional experience in DevOps, Infrastructure, or related roles.
- Practical experience working with Unix/Linux servers.
- Some exposure to Kubernetes (running clusters or contributing to their maintenance is a plus).
- Familiarity with Terraform and at least one scripting/programming language (Go, Python, or JavaScript preferred).
- Basic understanding of cloud platforms (AWS preferred) and a motivation to deepen cloud security knowledge.
- Comfortable using GitLab or similar tools in your daily routine.
- Good problem-solving abilities and willingness to learn new technologies.
- Interest in automation to streamline workflows.
- Experience working in an Agile environment and proactive in collaborating with the team.
- Exposure to monitoring and observability tools (Datadog or similar).
- Eagerness to grow knowledge in vulnerability detection and security tooling (e.g. Falco, GuardDuty).
- Fluent in English, both spoken and written.
Nice to have:
- First experience with security practices (SAST/DAST, secret scanning, or cloud security configs).
- Curiosity about incident response or log analysis.
- AWS or Kubernetes certification.
Benefits
- Grow together with one of the fastest growing eCommerce companies in Europe
- Flexible working times (10 AM - 16 PM German Time Zone as core working-time)
- 40% discount on our online shop
- Fresh fruits + drinks everywhere
- Language courses (German & English)
- Free sports courses & reduced price for gym membership
- Subsidized public transportation ticket
- Free choice of hardware and operating system (Mac, Windows, Linux) also for private usage
- State-of-the-art tech stack running on AWS
- Modern office in the city center of Hamburgs
- International working environment and English as company language
- Agile work environment (MOVE) and cross-functional teams
- Free access to Germany’s greatest developer conference code.talks
- Free access to online learning platforms like Laracast, Egghead and A Cloud
