Cloud Security Architect - DevSecOps Leader

Black Duck; Belfast City District; On-site; GBP 90,000 - 150,000; Full time

Job summary

Black Duck Software, Inc. is seeking a Senior Cloud Security Engineer to advance security for cloud-based SaaS platforms and infrastructure at scale.

You will design, implement, and operate security controls, drive remediation with engineering partners, and shape cloud security standards across the organization. The role combines cloud security expertise with leadership, coaching peers, and guiding DevSecOps practices, influencing architecture and strategy across engineering, platform, and IT

Qualifications

• Bachelor’s degree or equivalent practical experience.
• 5–7+ years in information security with cloud security focus.
• Hands-on experience securing cloud environments at scale (AWS, GCP, Azure or equivalent).

Responsibilities

• Act as Cloud Security SME; develop cloud security standards and policies.
• Design, build, and operate security controls for SaaS services on AWS, GCP, and other clouds.
• Monitor resources and configurations; triage findings and drive remediation with owners.
• Identify threats via vulnerability assessments and log analysis; ensure SOC 2 and ISO 27001 compliance.
• Automate security controls and workflows using Python/Bash and IaC tools.
• Lead cross-functional cloud security projects and architecture decisions.

Skills

Cloud security

Python/Bash scripting

Kubernetes

DevSecOps

Threat modeling

Education

Bachelor's degree in Information Security or Computer Science

Tools

Terraform

CloudFormation

Helm

CSPM

CNAPP

Job description

Black Duck Software, Inc. is seeking a Senior Cloud Security Engineer to advance security for cloud-based SaaS platforms and infrastructure at scale.

You will design, implement, and operate security controls, drive remediation with engineering partners, and shape cloud security standards across the organization. The role combines cloud security expertise with leadership, coaching peers, and guiding DevSecOps practices, influencing architecture and strategy across engineering, platform, and IT