Senior Software Engineer, Platform (Security Focused) (m/f/d)

casavi

3d•Hybrid

About The Position

You are part of our dedicated Platform team, building and operating the foundation that every product team at casavi builds on. With the team, you own and evolve our platform: from core product features every team builds on, like Auth, I18n, Feature Flags, and so on, to infrastructure, with our AWS setup, Kubernetes clusters, GitOps workflows, and Infrastructure-as-Code (IaC), working with Terraform, Helm, ArgoCD, and GitLab CI/CD, while monitoring system health with Prometheus & Grafana. Your main personal focus is Application Security: making sure our product stays robust and reliable in the face of modern growing security threats, via comprehensive automated quality gates, regular security testing being done as a practice, strong security standards embedded in the SDLC of our teams, and appropriate instrumentation of the AI Coding Assistant tooling our team is using. You also bake security into our infrastructure, implementing automated vulnerability scanning, secure secrets management, and Policy-as-Code guardrails so that shipping securely is always the path of least resistance. You harden our cloud environments, ensuring robust IAM configurations, network policies, and foundational security baselines are continuously enforced. You collaborate closely with fellow engineers across the Platform team and with product teams, bringing your ideas to make our platform more reliable, scalable, and easy to build on.

Requirements

Several years of experience working with TypeScript (Node.js, REST API, MySQL, MongoDB, Nest.js, React).
Proven track record of establishing secure SDLC in software engineering teams.
Proven hands-on experience running production Kubernetes clusters and managing cloud infrastructure.
Knowledge of AWS, Terraform, Helm, GitOps (ideally ArgoCD), and CI/CD pipelines (ideally GitLab CI).
Understanding of cloud-native security principles and experience securing pipelines, container images, and infrastructure (e.g., using AWS Secrets Manager, Vault, Trivy, Snyk, or similar tooling).
Power user of AI-based tools (GitHub Copilot, Claude Code, Codex, etc.) and ability to use them for safe and responsible internal tooling and automation.
Preference for scripting and orchestrating agentic workflows over heavyweight developer portals.
Excellent analytical & problem-solving skills with the ability to own problems end-to-end.
Strong communication skills with English proficiency at a very good level (>C1).
Residency in Germany.

Nice To Haves

Experience with Python (Flask, FastAPI, MongoDB).
Strong experience with observability tooling (Prometheus/Grafana) and monitoring production systems.

Responsibilities

Own and evolve the platform, including core product features (Auth, I18n, Feature Flags) and infrastructure (AWS setup, Kubernetes clusters, GitOps workflows, IaC).
Implement and manage Infrastructure-as-Code using Terraform, Helm, ArgoCD, and GitLab CI/CD.
Monitor system health using Prometheus & Grafana.
Focus on Application Security: establish automated quality gates, conduct regular security testing, embed security standards in SDLC, and instrument AI Coding Assistant tooling.
Integrate security into infrastructure: implement automated vulnerability scanning, secure secrets management, and Policy-as-Code guardrails.
Harden cloud environments by ensuring robust IAM configurations, network policies, and foundational security baselines.
Collaborate with fellow engineers and product teams to improve platform reliability, scalability, and ease of use.