Working Student – Application & Infrastructure Security (DevSecOps) (f/m/d)

We are looking for a motivated working student (f/m/d) to join the GEA Digital security team and help shape the security posture of our digital platforms across the DigiHub. You will work hands-on with our security platform (Aikido), modern DevOps tooling, and cutting-edge topics like Agentic AI and AI-powered penetration testing — while collaborating with DevOps, InfoSec, ITSec and application owners across divisions.

- Security Research, Planning & Implementation: Drive software (application and infrastructure) security research and implementation using Aikido , the security platform for GEA Digital, including analysis of InfoSec security reports

- Stakeholder Coordination: Support coordination with the DevOps team, solution/application owners, InfoSec, ITSec and the CAF team to deliver the DigiHub / cross-divisional security strategy framework

- Security Posture Ownership: Co-own the security posture for the Aikido organizations (Eureka, IIoT, DigiHub)

- Daily Security Operations: Perform daily checks on security dashboards, PR gates, and SLA management for issues in your responsible workspaces

- Tooling Development: Develop and test security tools, applications and scripts to enable security assessments for responsible teams and applications

Project Support

- Support the adoption of the DigiHub-wide Security Strategy Framework

- Contribute to the AI-Pentest Development Tool initiative

- SIEM Integration for SoC Team

Your Learning Curve

- Agentic AI secure development

- Red teaming and offensive security

- Designing secure systems architecture

- Hands-on Azure cloud security experience with microservices and scalable infrastructure (AKS)

Enrollment

- Actively enrolled as a degree-seeking student at a state-recognized university in Germany (proof of enrollment required)

Field of Study

- MS in Computer Science / Engineering — a major in Computer Networking and Security or a related field is preferable

Skills & Tools

- Solid knowledge of core CS areas: Data Structures & Algorithms, Computer Networks, Operating Systems, DBMS and Computer Security

- Strong understanding of OOP concepts, system design and distributed systems

- Knowledge of at least one public cloud platform ( Azure preferred )

- Working proficiency (reading, understanding, writing) in at least one modern programming language

- Good to have: understanding of IIoT security standards ( IEC 62443 ) and GDPR compliance

- Plus: experience with the DevOps/SRE toolchain (Argo CD, Loki, GitHub Actions, Grafana, Prometheus, etc.)

- Plus: foundational understanding of Agentic and Generative AI

Languages

- Strong English speaking and writing skills ( C1 minimum , required); German is a plus

What We Offer

- Real ownership of security topics in a production* cloud environment

- Mentorship in offensive security, secure architecture and AI-driven security tooling

- Flexible working hours compatible with your studies.

- Exposure to cross-divisional security strategy in a global industrial company