Cloud Security Engineer - DevSecOps

CMETS CME Technology and Support Services Ltd.; Belfast City District; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Bonus Programme

Equity Programme

Employee Stock Purchase Plan (ESPP)

Private Medical and Dental coverage

Mental Health Benefit Programme

Group Pension Plan

Income Protection

Life Assurance

Cycle To Work

EV Car Benefit Scheme

Gym Membership

Education Assistance - MBA/Advanced/BA

Ongoing Employee Development Training/

Hybrid Working

Job summary

CME Group is seeking a Cloud Security Engineer - DevSecOps to weave automated security into the development lifecycle on Google Cloud Platform, aligning security with fast delivery across CI/CD pipelines.

You will implement IaC security controls using Terraform, ACM, and CloudFormation, write automation scripts, manage container security in GKE/EKS, and collaborate with cross-functional teams to ensure secure, scalable cloud-native architectures.

Qualifications

• 4–6+ years in development, infrastructure, or DevSecOps.
• Hands-on with public cloud workloads (GCP or AWS).
• Experience with Terraform, Ansible, Puppet, and CI/CD security gates.

Responsibilities

• Engineer and integrate automated security into CI/CD pipelines.
• Implement and maintain IaC security controls and deployment validation tools.
• Develop and deploy IaC templates and security policies using HCL, YAML, CloudFormation.
• Write automation scripts in Python, Go, Groovy, and Bash for security guardrails.
• Manage container security tooling across GKE and EKS.
• Build observability metrics, alerts, and dashboards for security services.
• Publish remediation metrics and support application teams through developer channels.
• Collaborate with engineers to align security controls with modern cloud-native architectures.

Skills

Security automation

CI/CD security

Python

Go

Groovy

Bash

Terraform

GCP

AWS

Kubernetes

Docker

Jenkins

Git

Maven

SRE

Education

Bachelor's or Master's degree in Computer Science or related field

Tools

Terraform

Ansible

Puppet

Jenkins

Git

Maven

GCP

AWS

Kubernetes

Docker

CloudFormation

ACM

Job description

Job Summary

Cloud Security Engineer - DevSecOps at CME Group, you will be instrumental in safeguarding the critical market infrastructure that powers the global derivatives ecosystem. Embedded within our cloud engineering initiatives, your mission is to weave automated security directly into the fabric of our development lifecycle on Google Cloud Platform (GCP). This role bridges velocity and resilience-empowering engineering teams to deploy rapidly while establishing automated deployment-time controls, immutable infrastructure validation, and proactive vulnerability management.

What You’ll Get

A supportive environment fostering career progression, continuous learning, and an inclusive culture. Broad exposure to CME's diverse products, asset classes, and cross-functional teams. A competitive salary and comprehensive benefits package. Explore our full range of benefits.

What You’ll Do

• Engineer and integrate automated security capabilities directly into CME’s enterprise CI/CD pipelines, embedding static analysis, software composition analysis (SCA), and vulnerability scanners into developer workflows.
• Implement and maintain Infrastructure as Code (IaC) security controls and deployment validation tools using Terraform, GCP Anthos Configuration Management (ACM), and AWS CodeDeploy.
• Develop, package, and deploy robust IaC templates and security policies utilizing HashiCorp Configuration Language (HCL), Kubernetes Resource Model (KRM) YAML, and CloudFormation.
• Write robust automation scripts and integration tooling using Python, Go, Groovy, and Bash to facilitate seamless developer adoption of security guardrails.
• Maintain and troubleshoot container security tooling deployed across Kubernetes environments, including Google Kubernetes Engine (GKE) and Amazon EKS.
• Build observability metrics, alerts, and dashboards for security services utilizing Site Reliability Engineering (SRE) and DevOps principles.
• Publish actionable vulnerability remediation metrics and operational documentation, offering direct support to application teams through internal developer channels.
• Partner collaboratively with peer engineers and cross-divisional squads to ensure alignment between security controls and modern cloud-native architectures.

What You’ll Bring

• Applied technical background with approximately 4-6+ years of experience across application development, infrastructure engineering, or dedicated DevSecOps practices.
• Hands-on proficiency deploying, configuring, and securing workloads in public cloud environments, with an emphasis on Google Cloud Platform (GCP) or AWS.
• Strong working knowledge of Infrastructure as Code and configuration management tools such as Terraform, Ansible, or Puppet.
• Practical experience embedding automated security gates within CI/CD platforms, particularly Jenkins, Git, and Maven.
• Proven scripting and coding abilities in languages such as Python, Bash, Go, or Groovy to automate complex pipeline actions.
• Working familiarity with containerization and orchestration platforms, including Docker and Kubernetes (GKE/EKS).
• Familiarity with cloud-native monitoring and telemetry suites such as GCP Cloud Operations/Logging, AWS CloudWatch, or Splunk.
• Working knowledge of industry security baselines and regulatory frameworks (e.g., CIS Benchmarks, NIST 800 series, PCI-DSS).
• Clear, collaborative technical communication skills with a mindset geared toward enablement rather than friction.
• Bachelor's or Master's degree in Computer Science, Information Systems, or a related discipline; or equivalent practical experience.
• Relevant cloud or security certifications are advantageous (e.g., GCP Associate Cloud Engineer, GCP Professional Cloud Security Engineer, CKA, or CSSLP).

Company Benefits

• Bonus Programme
• Equity Programme
• Employee Stock Purchase Plan (ESPP)
• Private Medical and Dental coverage
• Mental Health Benefit Programme
• Group Pension Plan
• Income Protection
• Life Assurance
• Cycle To Work
• EV Car Benefit Scheme
• Gym Membership
• Family LeaveEducation Assistance - MBA/Advanced Degree/Bachelor Degree
• Ongoing Employee Development Training/Certification
• Hybrid Working

Company Culture

CME Group: Where Futures are Made. CME Group is the world's leading derivatives marketplace. But who we are goes deeper than that. Here, you can impact markets worldwide. Transform industries. And build a career by shaping tomorrow. We invest in your success and you own it - all while working alongside a team of leading experts who inspire you in ways big and small. Problem solvers, difference makers, trailblazers. Those are our people. And we're looking for more. At CME Group, we embrace our employees' unique experiences and skills to ensure that everyone's perspectives are acknowledged and valued. As an equal-opportunity employer, we consider all potential employees without regard to any protected characteristic.

For U.S. employment, CME Group is legally required to validate a new hire’s employment eligibility by having them complete an Employment Eligibility Verification (Form I-9) accompanied with legally acceptable proof of identity and work authorization (as listed on the Form I-9). CME Group uses E-Verify, which is an online system operated by the U.S. Department of Homeland Security in partnership with the Social Security Administration to verify employment eligibility and validate social security numbers. Through participation in the E-Verify program, information entered on Form I-9 will be provided and compared to information available at both of these agencies. See posters below for more details.

Compliance Notices

E-Verify Notice E-Verify Notice Español U.S. Right to Work Notice U.S. Right to Work Notice Español