DevOps Engineer - Continuous Security Assurance (Hybrid setup)

Join a team of cybersecurity professionals and help Swiss Re to fulfil its mission in making the world more resilient. As a DevOps Engineer, you’ll be responsible for deploying and operating our data scanning/data discovery solution (BigID) in Kubernetes environments, creating CI/CD pipelines, and integrating data security solutions with our IT landscape. You’ll work in a hybrid setup, perfectly balancing work from home and the office premises.  

About the Role  

As a DevOps Engineer, you'll be responsible for protecting Swiss Re’s sensitive data through the development and implementation of processes, tools and strategies that prevent data leakage and misuse.   

We are enhancing our capabilities in data discovery, classification and policy enforcement. These improvements enable us to identify sensitive data across the enterprise, automate protection measures and integrate insights into our security operations to better safeguard information and meet regulatory requirements.   

We're looking for a skilled DevOps Engineer who will take on the incentive of implementing the best solution and guiding the development of these engineering services along with a dedicated team of experts.    

About the Team  

The Security Team is the focal point for all security activities across Swiss Re. We are responsible for cybersecurity engineering and operations, governance, risk and compliance. We define and advance the company's security strategy.  

As a part of the Security Team, the Continuous Security Assurance (CSA)  Engineering team owns and develops applications and tools for vulnerability management, penetration testing, and Red Teaming. 

We are looking for an expert engineer who'll help us to integrate vulnerability sensors, process vulnerability data and improve our security operations through automation. 

In your role, you will…  

• Deploy, operate and optimise data scanning/data discovery solutions (BigID) in Kubernetes environments  

• Design and build CI/CD pipelines for security solutions  

• Develop and maintain API automations to streamline security processes  

• Integrate data security solutions with the broader IT landscape  

• Improve metrics and monitoring to ensure the reliability of our security infrastructure  

• Utilise existing documentation, source code and logs to understand complex interactions between systems  

• Provide security guidance on new products and technologies  

• Communicate and collaborate effectively with stakeholders   

About You  

You're a passionate security professional who has worked with CI/CD deployment practices and Kubernetes environments. You thrive in collaborative environments and can translate complex technical concepts into practical security solutions. Your technical expertise is complemented by good communication skills and a drive to continuously improve security infrastructure and application landscape.  

We are looking for candidates who meet these requirements:  

• Bachelor's degree in Computer Science, Software Engineering or equivalent  

• 3+ years of relevant work experience  

• Expertise with several of the following areas:   

• Kubernetes environments  

• Cloud deployment with infrastructure-as-code (Azure preferred) 

• CI/CD pipeline design and implementation  

• Significant knowledge of major cybersecurity concepts, technologies and standard methods, with a willingness to dive into new areas  

• Knowledge of a major public cloud ecosystem (Microsoft Azure preferred) 

• Knowledge on microarchitecture design in Azure and other cloud providers, and Azure security tooling 

• Familiarity with the implications of security standards in regulated environments 

• Experience in automation, coding and/or scripting, using one or more of the following languages: Bash, Golang, Python, Perl, Terraform or similar  

• Can-do attitude with a proactive approach toward challenges, producing tangible results 

• Excellent communication skills – fluency in English, both spoken and written  

These are additional nice to haves:  

• API development and automation experience 

• Network security, application security and identity management  

• Knowledge in data security and data discovery solutions (BigID or similar) is  

• Experience with agile development and DevOps  

• Experience building integrations to existing systems