Information Security Engineer - DevSecOps
Core
Build and manage CI/CD pipeline security controls, cloud security posture, and infrastructure-as-code environments to support global growth.
Role type
Senior IC Information Security Engineer (DevSecOps)
Builds
Secure CI/CD pipelines, cloud security configurations, and automated security controls for application development and release management.
Domain
Financial services, Cloud Security, DevSecOps
Required skills
CI/CD pipeline security, Cloud security posture management (CSPM), Infrastructure as Code (IaC), Policy as Code, Vulnerability assessment and remediation, Secure coding practices, Cloud workload protection, Container security, Scripting (PowerShell, Python, C#, Java), Framework application (NIST, CIS, ISO)
Preferred skills
GitHub Advanced Security, Terraform, Kubernetes security, Open Policy Agent (OPA)/Rego, CNAPP configuration
Technologies
GitHub Actions, Terraform, Azure, AWS, Kubernetes, CNAPP, OPA/Rego, PowerShell, Python, C#, Java
Responsibilities
Develop and manage configuration, maintenance, and operations of DevSecOps-related security services; Secure CI/CD platforms and implement pipeline security practices; Assess cloud security posture and propose risk remedies; Develop secure coding and architecture standards; Standardize processes and automate security controls through coding and scripting; Implement cloud security policies and CNAPP configuration as code; Analyze security controls and make recommendations for improvements.
Seniority
Senior, hands-on IC