DevSecOps Engineer (f/m/x)
About lemon.markets 🍋
We enable anyone to be an investor. Our mission is to grow investing opportunities for all European customers and businesses, providing seamless access to capital markets. By empowering FinTechs, Banks and Wealth Managers to offer investment products, we help create financial well-being for their customers.
lemon.markets provides a Brokerage-as-a-Service platform for simple digital access to capital markets through a single API. Our API-first infrastructure makes launching an investment product customer-centric and compliant. We abstract all complexity for our partners through a well documented API, a self-service customer operations portal and operating in a clear regulatory framework. Enabling partners to launch in weeks, not months.
We have experienced first hand that brokerage infrastructure is broken. Building an investment product used to be highly expensive, challenging and cumbersome. We ease this pain by shielding our partners & their customers from the underlying complexity - and with that, we make investing seamlessly accessible to everyone. Because that’s exactly what we enjoy, going to places nobody else dares and solving hard problems. This not only creates tons of value when done right, but attracts the smartest minds - because outlier companies are built by exceptional people like you.
Your Mission:
As a DevSecOps Engineer, you will lead the design, guidance and automation of our cloud infrastructure security, with robust, secure and scalable solutions. You’ll develop proactively strategies and solutions to ensure security is at the heart of everything we do here at lemon.markets.
This means: you will have an important role in building our brokerage API offering that allows companies to easily embed brokerage services into their existing products.
Moreover, you will expand and improve our existing Trading API Product to become the leading trading API for developers.
About you:
If you don’t match every single point below, that’s completely okay, We’re looking for strong alignment with most of these areas, plus the curiosity and drive to learn the rest on the job.
You have proven experience with AWS infrastructure and services and you know your way around AWS security fundamentals, such as VPC, Security Groups, Guard Duty, Control Tower or CloudTrail.
You have experience securing Kubernetes, e.g., applying network policies, admission controls, OPA/policy-as-code, and service-mesh-aware security patterns.
You understand the Software Development Lifecycle (SDLC) and its tooling (GitHub, CI/CD), and you know how to embed and operate security controls throughout the delivery lifecycle.
You are well versed with IaC and Configuration management tools such as Terraform and Helm chart.
You have hands-on experience with network and identity security, including firewalls/WAF, PKI/certificates, identity providers (IdP/SSO), and RBAC/least-privilege access controls.
You have hands-on experience designing and operating a Vulnerability Management program end-to-end, covering SAST, DAST, SCA, container/image scanning, cloud/Kubernetes posture scanning, and runtime anomaly detection.
It’s a plus to hold any Security Certifications such as: GSEC, CISSP, CCSP, CCSK, CISM, GCUX or SAST.
You will be successful if:
Security is everything to you. We operate in a highly regulated environment and therefore having worked prior in a Fintech or Financial Service provider (Bank, Insurance or Brokerage) or within the Cyber Security industry would be preferred.
You have a bias for action over discussion. To avoid getting stuck in discussion, you collect new feedback, try out a different approach or gather data with a proof of concept because you trust the process.
You are ready and willing to take ownership of problems and act on them with no supervision and decisively.
You have a collaborative mindset. Working together as a team and sharing knowledge comes natural to you. Long term - you consider becoming a team lead.
You have no problem with learning new technologies on the go. You try to solve problems with more things than the ones you already know. We will always enable you with that, but your willingness has to come first.
How we take care of you:
🚀Competitive compensation package:
We offer you a competitive salary and benefits package, based on your experience and the value-add you bring to lemon.markets.
💎Make a real impact:
Shape the experience for our customers and us alike. Decide on tools, processes and the architecture design of our Platform & API, while building, learning and growing together.
🕑Flexible working hours:
We value focus time. Encouraging everyone to minimise fixed meetings and leverage asynchronous communication. Of course, you’ll be available during our core working hours for collaboration and support.
💻Build your perfect setup:
MacBook, IDE, productivity tools. These are not expenses but investments. Please tell us what is needed to make you productive, and we will take care of it.
🏢 Onsite first, but remote flexible:
We all believe that in - person collaboration is an integral part of working together, but offer flexibility for remote working. Once a quarter the whole team meets for our offsite to honer this belief. In case you want to relocate to Berlin, we can provide assistance and visa sponsorship.
📈 Grow with us:
We take your personal development seriously, meaning that we make sure to constantly mentor and challenge you so that you can reach your next level and beyond.
👶🏽 Get the flexibility you need:
Whether you have a family or a passion that you want to follow on the side. We want to offer you a setting that fits your current stage in life.
💛 Perks & benefits:
We sponsor a Deutschlandticket for employees on unlimited contracts, plus 50% off on Beatvest - our partner for financial education and investing.
🏝 Workation:
Work from anywhere in the EU for up to 60 days per year.
Diversity Commitment statement:🌈
As an equal opportunity employer, lemon.markets is committed to building an inclusive workplace. The company welcomes people from all different backgrounds, including age, citizenship, ethnic and racial origins, gender identities, individuals with disabilities, marital status, religions and ideologies, and sexual orientations to apply.
About the process
Hiring can be an exhausting process, especially when you're the one trying to get hired. Therefore, we try to make this a fast and transparent process. Additionally, you will always have one contact person guiding you through the process and helping you to schedule meetings, and setting you up on a path of success. Your process will look like this:
Get to know us - Melissa, Talent | 30 minutes
Meet the Hiring Manager - Paul, Engineering Manager Tech Foundations | 60 minutes
Take Home test and Review - One of our Tech Foundations Engineers | 45 minutes
Meet the team @ lemon.markets HQ | 120 minutes
System Design - Tech Foundations Engineers | 60 minutes
Principle Session: a selection of lemoneers | 60 minutes
Get-to-know - Max - CEO | 30 minutes