Senior Vulnerability & Container Security Engineer (m/w/d)

About This Opportunity

We are representing a confidential public-sector organization in Germany seeking a Senior Vulnerability & Container Security Engineer for a contract engagement. This role focuses on strengthening the security posture of modern container and cloud environments while ensuring comprehensive vulnerability management across container images and software supply chains.

Location: Remote within Germany, with occasional travel to Bonn
Contract Period: October 1, 2026 through December 31, 2026, with potential extension
Work Model: 90% remote
Important Note: Candidates must be willing to undergo security clearance procedures according to § 9 SÜG (German Security Clearance Act)

Responsibilities

• Lead vulnerability management initiatives within container and cloud infrastructure
• Analyze and prioritize vulnerabilities in container images, dependencies, and runtime environments
• Operate and integrate container scanning solutions into existing workflows
• Define and continuously improve policies for secure base images and hardened software supply chains
• Evaluate CVEs for exploitability and concrete risk within specific runtime contexts
• Coordinate remediation processes in collaboration with development and platform teams
• Monitor and ensure adherence to security baselines and relevant compliance requirements
• Prepare security reports, risk assessments, and actionable recommendations for stakeholders

What We're Looking For

• Minimum 5 years of experience in vulnerability management, specifically analyzing, evaluating, and prioritizing CVEs and technical vulnerabilities
• Minimum 5 years of hands-on experience with container security using Kubernetes and Docker, including operating and securing Kubernetes environments
• Minimum 5 years working with container and image scanning solutions such as Trivy or Grype
• Minimum 5 years of deep knowledge in software supply chain security, including SBOMs, signing, and artifact security
• Minimum 5 years of experience with cloud platforms and modern CI/CD and DevSecOps processes
• Minimum 5 years implementing and maintaining security baselines and compliance requirements, particularly CIS, BSI, and NIST frameworks
• Eligibility for German security clearance (SÜ2 according to § 9 SÜG)
• German language proficiency required for this public-sector engagement

How We Work with You

When you apply through Get A Job.ai, our recruiting team will review your profile and conduct an initial screening to ensure alignment with the role requirements. If there's a strong match, we'll submit your candidacy to our client for consideration. Please do not contact the client organization directly—all communication and coordination will flow through our talent team to protect your interests and ensure a professional process.

Pay

Compensation details will be discussed during the screening process based on your experience level and the client's approved rate structure.

Equal Opportunity: Get A Job.ai is committed to building diverse candidate pools and ensuring all qualified applicants receive consideration without regard to race, color, religion, gender, sexual orientation, national origin, disability status, or any other protected characteristic.