Lead DevSecOps Engineer

Metro Global Solution Center (MGSC) is internal solution partner for METRO, a €31.6 Billion international wholesaler with operations in more than 30 countries. The store network comprises a total of 623 stores in 21 countries, of which 522 offer out-of-store delivery (OOS), and 94 dedicated depots. In 12 countries, METRO runs only the delivery business by its delivery companies (Food Service Distribution, FSD). 

HoReCa and Traders are core customer groups of METRO. The HoReCa section includes hotels, restaurants, catering companies as well as bars, cafés and canteen operators. The Traders section includes small grocery stores and kiosks. The majority of all customer groups are small and medium-sized enterprises as well as sole traders. METRO helps them manage their business challenges more effectively. 

MGSC, location wise is present in Pune (India), Düsseldorf (Germany) and Szczecin (Poland). We provide HR, Finance, IT, Strategy, Branding & Business operations support to 31 countries, speak 24+ languages and process over 18,000 transactions a day. We are setting tomorrow’s standards for customer focus, digital solutions, and sustainable business models. For over 10 years, we have been providing services and solutions from our two locations in Pune and Szczecin. This has allowed us to gain extensive experience in how we can best serve our internal customers with high quality and passion. We believe that we can add value, drive efficiency, and satisfy our customers.

ABOUT THE ROLE:

Functionally reporting to the Head of Security and Privacy Engineering as part of the Security Engineering group. Individuals will contribute to security implementations, technical activities, and as embedded support for the security platform areas. This role will help to ensure security requirements and provide guidance on best practices across a diverse technology stack while ensuring security providence throughout the organization.

RESPONSIBILITIES:

• Responsible for the administrative management of security engineers
• Design, implement, and automate security controls across variable technology stacks
• Work with and on behalf of security engineers to improve security standards
• Contribute to the modernization of systems with security and privacy by design
• Act as a trusted advisor to engineering and development teams
• Evaluate, technology and contributing baseline identification of systems
• Collaborate with Security Engineering Leads to establish prioritization and staffing of engineers

DESIRABLE SKILLS:

 

Security experience in one, or more of the following:

• Several years of experience in DevOps, Platform Engineering, or Software engineering as an individual contributor.
• Experience reviewing, generating, and evaluating Infrastructure as code.
• Hands on experience writing and reviewing code and contributing to developer workflows such as design reviews, planning, and implementation.
• Strong understanding of security and privacy by design.
• Experience working in the areas of site reliability towards effective logging and monitoring technology
• Knowledge of networking technology including certificates, cryptography, and zero trust
• Experience across compliance frameworks (such as ISO 27001, HIPAA, PCI DSS, etc.)
• Familiarity with application architectures, including monolithic and microservice based designs.
• Comfort working across one or more programming languages such as Java, C++, Python, JavaScript or similar.

And:

• Experience with LLMs, AI, and agentic coding platforms such as Github Co-pilot, Gemini, or Claude Code.

Proven experience as a security subject-matter expert, mentoring and raising awareness to security mandates

Graduate