DevSecOps Engineer (m/w/d)

We are looking for

Every company needs new customers – and that's exactly what we solve. With Interlead, we build the #1 platform for leads, appointments, and orders and make customer acquisition easier, more transparent, and more predictable for our partners.

We are therefore looking for a DevSecOps Engineer (m/w/d) for our IT team, 100% from home office or at our Bremer Office!

This is what you'll be doing

• You will monitor and maintain our servers.
• You will take care of internal monitoring.
• You are responsible for the further development and maintenance of our IT infrastructure.
• You will manage our infrastructure as code (e.g. with Terraform, Ansible).
• You will integrate security checks directly into our CI/CD pipelines (Shift-Left approach) and continuously develop these.
• You will conduct regular vulnerability scans and penetration tests.
• You will take care of secrets management and secure handling of access data.
• You will ensure compliance with security standards and guidelines (e.g. ISO 27001, DSGVO).
• You will perform threat modeling and assess security risks early on.
• You will document processes and infrastructure.
• You will keep an eye on current trends and bring in new tools and best practices.
• You will advise colleagues on security-related issues.

With your expertise, you'll reach these milestones with us

• 0-3 months:
  • You have familiarized yourself with our team, processes, and IT infrastructure.
  • You have gotten to know our existing server, monitoring, and CI/CD landscape.
  • You have identified first optimization potential and current security measures.
  • You will take over independent tasks in daily operations and monitoring.
• 4-6 months:
  • You have integrated the first security checks into our CI/CD pipelines (Shift-Left approach).
  • You have implemented improvements in monitoring and alerting.
  • You have actively contributed to the further development of our infrastructure.
  • You have conducted the first vulnerability scans and derived measures from them.
• 7-12 months:
  • You will be responsible for independently managing central parts of our IT infrastructure.
  • You have established security standards and best practices in the team.
  • You will drive the automation of processes on your own initiative.
  • You will be a central point of contact for security-related issues.
  • You will bring in your own ideas and shape the further development of our DevSecOps culture actively with us.

This is what you'll bring

• You have completed an education or studied in the IT field (e.g. computer science, business informatics) – or comparable practical experience.
• You are familiar with container technologies (Docker, Kubernetes) and their secure operation.
• You have experience with infrastructure-as-code tools (e.g. Terraform, Ansible).
• You have experience with cloud platforms (e.g. AWS, Azure, GCP).
• You are knowledgeable about monitoring and logging tools (e.g. Prometheus, Grafana, ELK-Stack).
• You bring a good understanding of networks, firewalls, and common security concepts.

This is what we offer you

• This position can be fully performed from home office.
• You will work in an experienced senior team that acts quickly, leanly, and without unnecessary bureaucracy.
• We consistently rely on modern technologies and give you the freedom to try out new things.
• Short decision-making paths and flat hierarchies – your ideas don't land in a drawer, but directly in implementation.
• You will take over responsibility from the start and actively shape with us.
• Flexible working hours that orient themselves towards results – not presence.
• Participation in exciting, technologically demanding projects.
• Modern hardware of your choice.

This is what we value

• Fail Fast: We live a strong testing and error culture. We are pragmatic, courageous, and feel comfortable with change.
• Results: We work flexibly, but reliably. At our company, freedom goes hand in hand with result-orientedness and personal responsibility.
• Trust: We go openly with numbers, strengths, and weaknesses and do what's right for the company (