# Senior Security and Compliance Engineer (m/f/d) at Codesphere

> Open job at Codesphere in Munich, Karlsruhe, Germany. Workplace: Hybrid.

Source: Germany Dev Jobs, https://germanydevjobs.com/jobs/codesphere-senior-security-and-compliance-engineer-m-f-d-jp6x871
Posted 3 July 2026. Last checked on the employer's career site: 11 November 2026.

## Facts

- Company: [Codesphere](https://germanydevjobs.com/companies/codesphere)
- Location: Munich, Karlsruhe, Germany
- Workplace: Hybrid
- Employment type: Full-time
- German: Not required
- English: Fluent
- Not mentioned in the job post: salary, visa sponsorship, relocation, where you can apply from

## Job description

### About Codesphere

Codesphere is a _Virtual Cloud Provider_ from Germany building the future of sovereign cloud infrastructure. Our platform gives enterprises and governments full sovereignty without giving up modern cloud capability – a vision recently validated by a series of multi-million European government tenders.

Since our founding in Karlsruhe in 2020, we’ve expanded into an international team of 60+ experts. Based in Karlsruhe and Munich and backed by top-tier investors, we are chasing a bold vision.

**We’re scaling fast and would love for you to join us and grow alongside us 🚀**

### About the role

Codesphere runs cloud infrastructure that enterprises and governments depend on – security is not an afterthought, it's a foundation. As a **Senior Security & Compliance Engineer (m/f/d)**, you own the security posture of our platform: from vulnerability management and incident response to compliance frameworks and developer enablement.

### What you'll drive

- You conduct security assessments, penetration testing, and vulnerability scanning – and drive remediation with development teams
- You manage security scanning tooling (DAST/SAST) and perform security code reviews
- You design and implement security controls across our full technology stack, defining and enforcing standards for development, infrastructure, and data
- You integrate security into our CI/CD pipelines and development processes – Shift Left and DevSecOps in practice, not just on paper
- You develop and maintain our Security Incident Response Plan, monitor security logs via SIEM, and lead forensic analysis when needed
- You ensure compliance with relevant standards and regulations – including GDPR and ISO 27001
- You manage IAM systems with a least privilege approach
- You develop and deliver security awareness training for the whole company – and specialised secure coding training for engineering teams

### What makes you a great fit

- 5+ years in a security engineering or similar role, ideally in a cloud or SaaS environment
- Hands-on experience with penetration testing, vulnerability management, and DAST/SAST tooling
- Solid understanding of DevSecOps principles and CI/CD security integration
- Familiarity with SIEM tools, incident response, and forensic analysis
- Knowledge of relevant compliance frameworks – GDPR, ISO 27001, and ideally BSI IT-Grundschutz
- Strong communicator – able to translate security risks into clear guidance for both technical and non-technical audiences
- Fluent in English; German is a strong plus given the nature of our compliance landscape

### What's in it for you

- 32 days of paid time off – _30 regular vacation days plus Christmas Eve and New Year's Eve off_
- Meal allowance – _up to 15 digital vouchers per month, adding up to over €100 net for you_
- Flexibility – _hybrid work setup with mobile work options and flexibility around core hours_
- Steep learning curve – _fast-moving environment, real ownership, and a front-row seat to scaling a company_
- EGYM Wellpass & on-site gym – _get access to thousands of sports and wellness facilities nationwide, plus our free in-house gym in Karlsruhe_
- Gym access – _stay active on site (Karlsruhe office only)_
- Employee events – _from team offsites to regular get-togethers_
- Company pension scheme – _company-supported pension to set you up for later_
- Great public transport links – _both offices are within walking distance of tram and metro stops_

## How to apply

Apply on the job page, https://germanydevjobs.com/jobs/codesphere-senior-security-and-compliance-engineer-m-f-d-jp6x871: its Apply button opens the employer's own application page.

## More jobs from Codesphere

- [Software Engineer Working Student (m/f/d)](https://germanydevjobs.com/jobs/codesphere-software-engineer-working-student-m-f-d-47424ik): Codesphere, Karlsruhe, Germany. On-site. Posted 14 July 2026.
- [Senior Backend Software Engineer (m/f/d)](https://germanydevjobs.com/jobs/codesphere-senior-backend-software-engineer-m-f-d-5if0h5d): Codesphere, Karlsruhe, Germany. Hybrid. Posted 26 June 2026.
- [(Senior) Product Manager Deployments (m/f/d)](https://germanydevjobs.com/jobs/codesphere-senior-product-manager-deployments-m-f-d-amfrmad): Codesphere, Karlsruhe, Germany. Hybrid. Posted 22 May 2026.
- [Site Reliability Engineer (m/f/d)](https://germanydevjobs.com/jobs/codesphere-site-reliability-engineer-m-f-d-awyzho2): Codesphere, Remote (Germany). Posted 29 April 2026.
- [Customer Solution Architect (m/f/d)](https://germanydevjobs.com/jobs/codesphere-customer-solution-architect-m-f-d-97aveon): Codesphere, Karlsruhe, Germany. Hybrid. Posted 27 April 2026.