DevSecOps/DevOps Engineer All Identities

Caspar Health is seeking a DevSecOps/DevOps Engineer with strong application and infrastructure security skills to support their digital rehabilitation platform, enabling medical professionals to deliver life-changing therapy.

Location: Remote (Germany)

Responsibilities

• Lead triaging of security alerts and vulnerabilities, coordinate remediations, and build systems to prevent reoccurrence.
• Integrate automated security testing, vulnerability scanning, and compliance checks into CI/CD pipelines.
• Use Terraform and Terragrunt to evolve AWS infrastructure into a 'Security as Code' standard.
• Automate compliance to turn regulatory requirements into automated guardrails.
• Manage and harden data layers (PostgreSQL, Redis) and orchestrate Kubernetes environment with a zero-trust mindset.
• Collaborate with development squads to identify and remediate vulnerabilities early in the software lifecycle.

Requirements

• Strong knowledge of application security: OWASP Top 10, secure coding practices, dependency scanning, remediation.
• Solid understanding of infrastructure security: secure configurations, network segmentation, encryption, access controls.
• Proven track record in AWS environments, managing Infrastructure as Code (Terraform), and containers (Docker/K8s).
• Security mindset: encryption, network segmentation, secure access protocols.
• Enjoy Linux administration and automating tasks using Python, Go, or Node.js.
• Ability to explain complex security risks to developers in English.

Benefits

• Remote-first with flexible working hours, office optional in Berlin-Mitte, or up to 90 days outside Germany.
• Monthly home office allowance and meal subsidy.
• 30 vacation days per year.
• Budget for learning, development, conferences, and coaching.
• High ownership and decision-making freedom.
• Access to mental and physical well-being offerings.
• Snacks, group sports, drinks fridge, and humor.