About CodesphereCodesphere is a Virtual Cloud Provider from Germany building the future of sovereign cloud infrastructure. Our platform gives enterprises and governments full sovereignty without giving up modern cloud capability – a vision recently validated by a series of multi-million European government tenders.Since our founding in Karlsruhe in 2020, we’ve expanded into an international team of 60+ experts. Based in Karlsruhe and Munich and backed by top-tier investors, we are chasing a bold vision.We’re scaling fast and would love for you to join us and grow alongside us 🚀About the roleCodesphere runs cloud infrastructure that enterprises and governments depend on – security is not an afterthought, it's a foundation. As a Senior Security & Compliance Engineer (m/f/d), you own the security posture of our platform: from vulnerability management and incident response to compliance frameworks and developer enablement.What you'll driveYou conduct security assessments, penetration testing, and vulnerability scanning – and drive remediation with development teamsYou manage security scanning tooling (DAST/SAST) and perform security code reviewsYou design and implement security controls across our full technology stack, defining and enforcing standards for development, infrastructure, and dataYou integrate security into our CI/CD pipelines and development processes – Shift Left and DevSecOps in practice, not just on paperYou develop and maintain our Security Incident Response Plan, monitor security logs via SIEM, and lead forensic analysis when neededYou ensure compliance with relevant standards and regulations – including GDPR and ISO 27001You manage IAM systems with a least privilege approachYou develop and deliver security awareness training for the whole company – and specialised secure coding training for engineering teamsWhat makes you a great fit5+ years in a security engineering or similar role, ideally in a cloud or SaaS environmentHands-on experience with

Senior Security and Compliance Engineer (m/f/d)