Lead DevSecOps Engineer

We are looking for an experienced Lead DevSecOps Engineer who combines strong hands-on technical expertise with the ability to lead a team and deliver security solutions for international clients.

What we expect:

• 5+ years of hands-on commercial experience in DevSecOps, Cloud Security, or a related field.
• Strong expertise in DevSecOps and application security, including secure SDLC, vulnerability management, threat modeling, secrets management, IAM, and encryption.
• Extensive experience implementing and managing security tools within CI/CD pipelines, including SAST, DAST, SCA, SBOM, container and IaC scanning, with a focus on scalability and reducing false positives.
• Proven ability to design, implement, and maintain secure CI/CD pipelines using GitLab CI, GitHub Actions, Azure DevOps, Jenkins, or similar platforms, including reusable templates and secure-by-default practices.
• Solid experience with at least one major cloud platform (Azure, AWS, or GCP) and its security services.
• Hands-on experience with Docker, Kubernetes, and container security.
• Practical experience with Infrastructure as Code and configuration management tools such as Terraform, Ansible, and Helm.
• Strong scripting and programming skills in Python and Bash.
• Understanding of secure architecture principles and security best practices across cloud and on-premises environments.
• Experience defining and monitoring security metrics, including scan coverage, remediation timelines, and SLA compliance.
• Ability to translate technical security risks into clear business recommendations.
• Strong communication and stakeholder management skills, including leading workshops, presenting to senior stakeholders, and independently managing client-facing workstreams.
• Fluent English.

Nice to have:

• 1+ year of experience as a Team Lead or Tech Lead, including task allocation, technical reviews, and mentoring engineers.
• Previous consulting experience, ideally working with German or DACH-region clients.
• Familiarity with EU cybersecurity regulations and standards, such as NIS2, DORA, the Cyber Resilience Act, and BSI C5.
• Experience designing and implementing security controls for modern GenAI architectures.
• Hands-on experience integrating AI into DevSecOps processes, including AI-assisted vulnerability triage, secure code reviews, automated remediation, threat modeling, and security workflows.
• Experience measuring the effectiveness of AI-driven security solutions, including accuracy, false-positive rates, and remediation time.
• Experience establishing secure practices for AI coding assistants such as GitHub Copilot, Cursor, or Claude Code, including data protection, security guardrails, MCP integrations, and AI-generated code controls.
• Relevant DevSecOps or Cloud Security certifications.
• Experience selecting and implementing ASPM, CNAPP, CWPP, or CSPM solutions.

As a Lead DevSecOps Engineer, you will combine hands-on consulting work with technical team leadership.

Approximately 70–80% of your time will be dedicated to delivering DevSecOps solutions for international clients, primarily German companies. The remaining 20–30% will focus on leading and developing the DevSecOps team.

Client project delivery (70–80%):

• Assess clients' DevSecOps maturity and develop practical security improvement roadmaps.
• Integrate security practices into CI/CD pipelines and software development workflows.
• Design and implement secure cloud and infrastructure solutions, helping clients establish security standards and best practices.
• Select, integrate, and optimize security scanning tools for source code, dependencies, containers, and infrastructure.
• Advise clients on securing cloud environments, Kubernetes platforms, and supporting services.
• Conduct technical workshops and knowledge-sharing sessions with client teams.
• Analyze vulnerabilities, misconfigurations, and findings from security scans, penetration tests, and audits, supporting their remediation.
• Help clients adopt AI-assisted security solutions, evaluate their effectiveness, and establish appropriate security controls.
• Prepare technical documentation, security assessment reports, architecture recommendations, and other client deliverables.
• Collaborate with development, DevOps, and security teams, as well as Deloitte Germany colleagues, to improve security maturity.
• Optimize deployment and operational processes with a focus on security, automation, and reliability.

Team leadership (20–30%):

• Lead and mentor DevSecOps engineers, supporting their technical and professional development.
• Plan and coordinate team activities across client engagements.
• Review technical solutions, provide constructive feedback, and support technical decision-making.
• Participate in recruitment and team development activities.
• Support presales activities, including project scoping, effort estimation, and technical contributions to proposals.
• Communicate project progress, key risks, and outcomes to client stakeholders and engagement leadership.

Our recruitment process is designed to give you an opportunity to learn more about the role, meet the team, and demonstrate your experience.

The process may include:

1. HR Screening: An introductory conversation to discuss your experience, motivation, and expectations.
2. Technical Interview: A discussion of your DevSecOps expertise, cloud security experience, technical approach, and relevant projects.
3. Final Interview: A conversation focused on team leadership, client engagement, and expectations for the role.

Deloitte is a global professional services organization providing audit and assurance, consulting, financial advisory, risk advisory, tax, and legal services.

We work with organizations across industries, helping them address complex business challenges, embrace innovation, and build resilient, future-ready operations.

At Deloitte, you will have the opportunity to collaborate with professionals from different backgrounds, develop your expertise, and contribute to projects that make an impact.

We welcome applications from all suitably qualified candidates and are committed to providing an inclusive recruitment experience.

You will join a DevSecOps team delivering security consulting services to international clients, primarily companies based in Germany.

The team focuses on integrating security into software development and delivery processes, strengthening cloud and infrastructure security, and helping clients adopt secure, scalable DevSecOps practices.

Working closely with client engineering and security teams, as well as Deloitte Germany colleagues, the team supports organizations in improving their security maturity through practical solutions, automation, and continuous improvement.

As a Lead DevSecOps Engineer, you will play an important role in both technical delivery and team development, combining hands-on engineering with mentoring, coordination, and technical leadership.