DevSecOps (m/f/d)

About Yepoda

Our mission is to bring the best beauty innovations from Korea straight to Europe – without compromising our values, quality, and sustainability. All our products are vegan, cruelty-free, and crafted from the best natural and active ingredients. Our aim is to make the science simple, discovering what works for your skin and for the planet – Clean K-Beauty Innovations.

Founded in 2020, Yepoda is based in the heart of Berlin and is powered by over 110 brilliant individuals from around the globe who are actively writing our story.

We are looking for a DevSecOps to join our growing team at Yepoda. In this role, you will play a key role in embedding security, compliance, and reliability into our cloud infrastructure and system integrations.

Your Tasks

• Design and implement secure cloud infrastructure on Google Cloud Platform using Terraform and Infrastructure as Code principles

• Build and maintain integrations between core business systems including Shopify, Oracle NetSuite, and various third-party tools

• Establish and enforce security controls, IAM policies, and role-based access management across all cloud resources

• Implement GDPR-compliant data handling practices and PII protection mechanisms throughout the infrastructure

• Set up comprehensive monitoring, logging, and alerting systems to maintain security posture and operational visibility

• Create and maintain CI/CD pipelines with integrated security scanning and compliance validation

• Document infrastructure architecture, security policies, and standard operating procedures

• Conduct security audits and implement remediation measures to maintain compliance standards

Your Profile

• 3-5 years of hands-on experience in DevOps or DevSecOps roles

• Strong expertise with Google Cloud Platform services (Compute Engine, Cloud Storage, BigQuery, IAM, VPC, Security Command Center)

• Proven experience implementing infrastructure using Terraform with version control and modular design

• Direct experience working with Oracle NetSuite and Shopify platforms, APIs, and integration patterns

• Background working at consumer/D2C/B2C companies with exposure to customer data and e-commerce operations

• Deep understanding of GDPR requirements and practical experience implementing data privacy controls and PII handling

• Solid knowledge of security best practices including secrets management, encryption, network security, and zero-trust principles

• Experience with containerization technologies (Docker, Kubernetes)

• Proficiency in scripting and automation (Python, Bash, or similar)

• Strong understanding of CI/CD concepts and tools (Cloud Build, GitHub Actions, or similar)

• Excellent problem-solving skills and ability to work independently

• Strong communication skills in English (written and verbal)

Nice to have

• Google Cloud Professional certifications (Professional Cloud Architect, Professional Cloud Security Engineer, or Professional Cloud Engineer)

• Experience with n8n, Zapier, Make, or other workflow automation platforms

• Experience with additional security tools (vulnerability scanners, SIEM, IDS/IPS)

• Familiarity with compliance frameworks such as SOC 2, ISO 27001, or similar standards

• Experience with secrets management solutions (Google Secret Manager, HashiCorp Vault)

• Experience with disaster recovery planning and business continuity

What We Offer

• Dynamic Environment: The opportunity to work in a start-up environment surrounded by a passionate and dedicated team.

• Accelerate Your Career: Take on responsibility from day 1, with room for professional growth and advancement as the company continues to expand.

• Inspiring Workspace: Located in the heart of Berlin's Prenzlauer Berg, a dog-friendly office, with free drinks and snacks.

• Hybrid Working: We understand that sometimes you get more stuff done from home and need a change of scenery.

• We Value Diversity: We seek to build an inclusive workplace that welcomes people from all different backgrounds. A welcoming, international, dedicated team with flat hierarchies and trust by default.

• Employee Discounts: You’ll get to enjoy the Yepoda products at a discount and share it with friends and family to keep your glow going!

• Unique add-ons: Enjoy an Urban Sports membership package to help you stay active and healthy.

Would you like to be part of the team? Then we'd love to hear from you! 🫰✨

Make sure to apply by clicking on the “Apply for this job” button below. Please upload your CV and Cover Letter in English language. Our Talent Acquisition team will review your application and get back to you as soon as possible.

At Yepoda we are dedicated to providing equal employment opportunities to all individuals, regardless of race, color, ethnicity, ancestry, religion, national origin, citizenship, gender, gender identity or expression, sexual orientation, age, marital status, parental status, disability, or any other status protected by applicable law.