Platform & Security Engineer (m/f/d)

Sport Alliance is a market-leading company in the Fitness and SaaS industry with an international team and a dynamic, fast-growing environment.

• Strong understanding of Go and TypeScript ecosystems from a developer’s perspective.
• Experience securing software supply chains and integrating security into CI/CD pipelines.
• Highly self-sufficient with full ownership of tasks and projects.
• Effective communication skills to explain complex technical details and collaborate with diverse teams.
• Passion for learning new technologies and exploring unknown territory.
• Strong interest in tackling challenging technical problems with attention to detail and quality.
• Proficiency with Terraform/OpenTofu, Shell scripting, and core AWS services (VPC, EC2, ELB, Route53, IAM, RDS, CloudFront, Lambda, S3, CloudTrail, CloudWatch Logs, StepFunctions).
• Familiarity with Go, TypeScript, GitHub Actions, Docker, Kubernetes, GitOps, Datadog, and Wiz (CNAPP).
• Occasional use of Python, Java/Kotlin, Helm, Maven, Gradle, Spring framework, RabbitMQ.

Developer-Driven SecOps:

• Transition manual security and infrastructure processes into automated, self-service APIs and internal tooling.

Platform Operations:

• Design, implement, and operate secure, reliable cloud infrastructure (primarily AWS) enabling self-service for engineering teams.

Infrastructure Hardening:

• Apply defense-in-depth and zero-trust principles with layered security controls across network, compute, identity, and data tiers.

Security Standards & Governance:

• Develop, document, and enforce security standards, guidelines, and hardening baselines for SDLC and platform operations.

Incident Response:

• Detect, triage, manage, and respond to cybersecurity incidents from initial signal through resolution and post-mortem.

Hands-on Security Engineering:

• Address vulnerabilities, implement security features (WAF rules, SIEM monitors, access policies), and improve platform resilience.

Continuous Threat Review:

• Conduct ongoing reviews of security tooling, processes, and controls in response to new threats and risk assessments.

Harness Engineering:

• Extend and improve tooling supporting Agent-Harnesses to safeguard AI-assisted development workflows.

Stakeholder Collaboration:

• Coordinate and align with CTO, CISO, Engineering Managers, Tech Leads, and cross-functional product teams.

Typical Projects:

• Build custom internal integrations and automation scripts using Go and TypeScript.
• Establish secure cloud boundaries, API gateways, and guardrails for AI model integration.
• Cloud infrastructure setup, migration, and hardening (AWS networking, IAM, ECS, storage).
• Implement zero-trust architecture and identity/access management.
• Design SIEM rulebooks, alert tuning, and gap analysis.
• Manage secrets, certificate lifecycle automation, and WAF/DDoS perimeter security.
• Enable developer security via secure defaults, pipeline integrations, and harness improvements.