Secret Scanning Architect (m/w/d) (Rust & AI)

Leistungsbeschreibung

In this project, the existing scanner will be enhanced to provide more accurate results through the integration of AI and prepared for a global rollout. Additionally, the scanner will be expanded to other technologies. The goal is to optimize the scanner's performance and extend its capabilities to ensure it can handle a broader range of tasks efficiently. This will involve not only improving its accuracy but also making it versatile enough to be deployed on a global scale.

Anforderungen

Main Responsibility:

Development and optimization of our Gitleaks-based secret scanning solution .

Development:

• Enhancement of the secret scanner with custom extensions in Rust
• Implementation of new detection patterns and regex rules for various secret types
• Integration into GitLab CI/CD pipelines with automated policy checks
• Connection to LLM systems (ONNX) for false-positive reduction

Optimization:

• Improvement of detection rates and scan performance
• Evaluation of alternative scanner tools
• Documentation and training of development teams
• Enforcement of security best practices

Mandatory Skills:

• Rust – You have strong command of the language and understand its specifics
• GitLab CI/CD – Deep understanding of pipeline architectures, job orchestration, and best practices
• Docker – Expertise in container development, multi-stage builds, security aspects, and optimization
• Kubernetes – Solid knowledge
• Postgres & Redis – Practical experience with both database systems, their architecture, and performance tuning
• Secret Management – Sound understanding of different secret types, their handling, and security aspects
• GitLab Policies – Hands-on experience with policy management and compliance requirements
• Regular Expressions (Regex) – Confident application for pattern matching and data validation
• LLM & ONNX – Fundamental understanding of Large Language Models and the ONNX format
• Markdown – Professional documentation creation
• Hands-on experience with different secret scanning tools and their integration

Über den Auftraggeber

Start: 01.03.2026

End: 30.06.2026

Offsite hours: 680 (100% remote)

Only near- and offshore candidates can be considered. (Candidates residing outside Germany)