---
title: 'Senior Security and Compliance Engineer (m/f/d) at Codesphere'
canonical: 'https://feeny.ai/job/senior-security-and-compliance-engineer-m-f-d-codesphere-munich-v368krz2sgeb'
type: 'job'
last_seen: '2026-09-08'
---

# Senior Security and Compliance Engineer (m/f/d) at Codesphere

- **Company:** Codesphere
- **Location:** Munich, Germany
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-07-03
- **Last confirmed live:** 2026-09-08
- **Apply:** https://jobs.ashbyhq.com/codesphere/5dcd771d-656d-438d-bae8-0b00fb805b36

## Job description

## ABOUT CODESPHERE

Codesphere is a Virtual Cloud Provider from Germany building the future of sovereign cloud infrastructure. Our platform gives enterprises and governments full sovereignty without giving up modern cloud capability – a vision recently validated by a series of multi-million European government tenders.

Since our founding in Karlsruhe in 2020, we’ve expanded into an international team of 60+ experts. Based in Karlsruhe and Munich and backed by top-tier investors, we are chasing a bold vision.

We’re scaling fast and would love for you to join us and grow alongside us 🚀

## ABOUT THE ROLE

Codesphere runs cloud infrastructure that enterprises and governments depend on – security is not an afterthought, it's a foundation. As a Senior Security & Compliance Engineer (m/f/d), you own the security posture of our platform: from vulnerability management and incident response to compliance frameworks and developer enablement.

## WHAT YOU'LL DRIVE

- You conduct security assessments, penetration testing, and vulnerability scanning – and drive remediation with development teams
- You manage security scanning tooling (DAST/SAST) and perform security code reviews
- You design and implement security controls across our full technology stack, defining and enforcing standards for development, infrastructure, and data
- You integrate security into our CI/CD pipelines and development processes – Shift Left and DevSecOps in practice, not just on paper
- You develop and maintain our Security Incident Response Plan, monitor security logs via SIEM, and lead forensic analysis when needed
- You ensure compliance with relevant standards and regulations – including GDPR and ISO 27001
- You manage IAM systems with a least privilege approach
- You develop and deliver security awareness training for the whole company – and specialised secure coding training for engineering teams

## WHAT MAKES YOU A GREAT FIT

- 5+ years in a security engineering or similar role, ideally in a cloud or SaaS environment
- Hands-on experience with penetration testing, vulnerability management, and DAST/SAST tooling
- Solid understanding of DevSecOps principles and CI/CD security integration
- Familiarity with SIEM tools, incident response, and forensic analysis
- Knowledge of relevant compliance frameworks – GDPR, ISO 27001, and ideally BSI IT-Grundschutz
- Strong communicator – able to translate security risks into clear guidance for both technical and non-technical audiences
- Fluent in English; German is a strong plus given the nature of our compliance landscape

## WHAT'S IN IT FOR YOU

- 32 days of paid time off – 30 regular vacation days plus Christmas Eve and New Year's Eve off
- Meal allowance – up to 15 digital vouchers per month, adding up to over €100 net for you
- Flexibility – hybrid work setup with mobile work options and flexibility around core hours
- Steep learning curve – fast-moving environment, real ownership, and a front-row seat to scaling a company
- Job-Rad – lease a bike through us, tax-free
- Gym access – stay active on site (Karlsruhe office only)
- Employee events – from team offsites to regular get-togethers
- Company pension scheme – company-supported pension to set you up for later
- Great public transport links – both offices are within walking distance of tram and metro stops

## About Codesphere

## Company Overview
- **One-liner**: Codesphere provides a sovereign cloud platform that enables organizations to develop, deploy, and manage applications across on-premises, cloud, and hybrid environments with vendor independence.
- **Entity Type**: Private (Series A, $19.2M raised in 2024)
- **Headquarters**: Karlsruhe, Germany (with offices in Munich and New York)
- **Founded**: 2020
- **Founders**: Elias Schneider (CEO), Thomas Weyand (COO), Christophe Attias (CTO), Roman Frolov (Co-Founder)

## Core Business
- **Primary industry/industries**: Cloud Infrastructure, DevOps, Enterprise Software, Digital Sovereignty
- **Target customers**: Large enterprises, public sector institutions, banks, and regulated industries (B2B, Enterprise)
- **Mission or purpose statement**: "Empowering organizations to innovate faster while maintaining control" — enabling users of all skill levels to develop and manage complex software across all environments.

## Products & Services
- **The Virtual Cloud Platform**: A sovereign platform layer that decouples compute from runtime, standardizes network storage, and removes Docker complexity. It can be installed on any infrastructure (air-gapped, on-prem, cloud, hybrid) and includes patented cold-start deployment technology, zero-config autoscaling, self-service CI/CD, and managed services.
- **Deployment Technology**: Patented deployment algorithm that eliminates Kubernetes knowledge requirements, enabling teams to deploy anything from simple frontends to multi-service production landscapes and LLMs.
- **Workspaces & Integrations**: Developer-centric self-service environment for end-to-end infrastructure management.

## Market Standing
- **Valuation/Market Cap**: Not publicly disclosed
- **Key Metric**: Annual Revenue of $6.7M (estimated); Total Funding of $27.4M across 4 rounds
- **Notable Investors/Partners**: Creandum (lead investor Series A), 42CAP, LEA Partners, Begin Capital, 468 Capital
- **Growth Signals**: 60+ team members (70 employees per LinkedIn, +23.2% YoY), 50k+ users, 99.99% uptime, 4+ offices across Germany and the US, operations in 9 countries, trusted by banks and public authorities, 10 active job postings (+900% YoY growth in postings)

## Competitive Advantages
- **Vendor & Cloud Agnostic**: Decouples infrastructure from any specific provider — portable across on-prem, cloud, or hybrid, enabling easy switching.
- **Sovereign by Design**: EU-first, vendor-neutral, and can operate in air-gapped environments — critical for regulated industries like banking and public sector.
- **Patented Deployment Technology**: Eliminates the need for Kubernetes expertise, reducing operational complexity and the DevOps talent bottleneck.
- **Cost Reduction**: Claims 40-60% reduction in total cost of ownership across infrastructure, personnel, and licenses.

## Strategic Focus
- **Digital Sovereignty**: Capitalizing on growing regulatory and geopolitical risks (trade wars, supply chain disruptions) to offer infrastructure independence.
- **Regulated Industries**: Deepening presence in banking, public authorities, and other restricted verticals where compliance and security are paramount.
- **AI Workloads**: Enabling production AI workloads (including LLMs) on their platform, even in air-gapped environments.
- **Enterprise Adoption**: Scaling from mid-market to large enterprise, with a focus on migrating legacy infrastructure without specialized DevOps resources.

## Why Work Here
- **Culture & Mission**: Purpose-driven work focused on solving infrastructure dependency and digital sovereignty — a high-impact, meaningful challenge in European tech.
- **Growth Trajectory**: Rapidly scaling company (23% YoY headcount growth, 900% increase in job postings) offering career acceleration and ownership.
- **Engineering Excellence**: Strong engineering pedigree rooted in Baden-Württemberg, Germany's high-tech hub. Technical team makes up 31% of headcount. Focus on patented, novel technology (not just "cloud wrapping").
- **International & Diverse**: Team of 60+ people from 10+ nationalities across 9 countries. Offices in Karlsruhe (HQ), Munich, and New York.
- **Hybrid/Remote**: Multiple office locations with flexibility; strong German engineering culture with global reach.
- **Notable Perks**: Work on a patented deployment technology that genuinely differentiates in the market; opportunity to shape a product used by 50k+ users and large enterprises.

## Sources
1. [codesphere.com](https://codesphere.com/)
2. [codesphere.com/company](https://codesphere.com/company)
3. [codesphere.com/company-people](https://codesphere.com/company-people)
4. [LinkedIn - Codesphere](https://www.linkedin.com/company/codesphere-inc)
5. [jobs.ashbyhq.com/codesphere](https://jobs.ashbyhq.com/codesphere)

## Other roles at Codesphere

- [Software Engineer Working Student (m/f/d)](https://feeny.ai/job/software-engineer-working-student-m-f-d-codesphere-karlsruhe-s2606z00jt67) — Karlsruhe, Germany
- [Senior Backend Software Engineer (m/f/d)](https://feeny.ai/job/senior-backend-software-engineer-m-f-d-codesphere-karlsruhe-w0d4shqfdrnn) — Karlsruhe, Germany
- [Senior Account Executive (m/f/d)](https://feeny.ai/job/senior-account-executive-m-f-d-codesphere-karlsruhe-8es15wbs0w50) — Karlsruhe, Germany
- [(Senior) Product Manager Deployments (m/f/d)](https://feeny.ai/job/senior-product-manager-deployments-m-f-d-codesphere-karlsruhe-03ah335ymbvg) — Karlsruhe, Germany
- [Head of Partner Management (m/f/d)](https://feeny.ai/job/head-of-partner-management-m-f-d-codesphere-karlsruhe-rse6x31x8dx9) — Karlsruhe, Germany
- [Site Reliability Engineer (m/f/d)](https://feeny.ai/job/site-reliability-engineer-m-f-d-codesphere-germany-517n21ynqnh4) — Germany
- [Customer Solution Architect (m/f/d)](https://feeny.ai/job/customer-solution-architect-m-f-d-codesphere-karlsruhe-apxzbcre3qr9) — Karlsruhe, Germany
- [Backend Software Engineer (m/f/d)](https://feeny.ai/job/backend-software-engineer-m-f-d-codesphere-germany-p6e7dw1chm2q) — Germany
- [(Senior) Project Manager (m/f/d)](https://feeny.ai/job/senior-project-manager-m-f-d-codesphere-karlsruhe-4vmwksf68gmt) — Karlsruhe, Germany