Cloud Security Engineer - DevSecOps (GCP/AWS)

Chicago Mercantile Exchange; Belfast City District; Hybrid; GBP 70,000 - 120,000; Full time

Benefits offered by this job

Career progression

Inclusive culture

Broad exposure to CME products

Competitive salary

Health benefits

Hybrid working

Job summary

CME Group is seeking a Cloud Security Engineer - DevSecOps to weave automated security into our development lifecycle on Google Cloud Platform. You will implement IaC security controls, integrate SCA and vulnerability scanners into CI/CD, and collaborate with cross-functional teams to balance speed with resilience.

You will deploy security policies, write automation scripts, and support developers with scalable guardrails across GKE/EKS environments.

Qualifications

• 4-6+ years in development, infra, or DevSecOps.
• Hands-on with cloud workloads on GCP or AWS.
• Strong IaC with Terraform, Ansible, or Puppet.
• Experience embedding automated security gates in CI/CD (Jenkins, Git, Maven).
• Scripting in Python, Bash, Go, or Groovy.
• Familiarity with Docker and Kubernetes (GKE/EKS).
• Knowledge of cloud monitoring (GCP Operations/Logging, CloudWatch).
• Understanding CIS Benchmarks, NIST 800-series, PCI-DSS.
• Bachelor/Master degree or equivalent practical experience.
• Certs like GCP/CKA/CSSLP are advantageous.

Responsibilities

• Engineer security into CME's CI/CD pipelines with SAST, SCA, and scanners.
• Implement and maintain IaC security controls and deployment validation.
• Develop, package, and deploy IaC templates using HCL, YAML, and CloudFormation.
• Create automation scripts and tooling (Python, Go, Groovy, Bash).
• Maintain container security tooling across Kubernetes (GKE/EKS).
• Build observability dashboards and alerts for security services.
• Publish remediation metrics and support development teams.
• Collaborate with engineers to align security with cloud-native architecture.

Skills

Cloud security

DevSecOps

CI/CD security

Python

Go

Bash

Kubernetes

Docker

GCP

AWS

Education

Bachelor's or Master's in CS/IS or related

Tools

Terraform

GCP ACM

AWS CodeDeploy

HCL

KRM YAML

CloudFormation

Jenkins

Git

Maven

Job description

CME Group is seeking a Cloud Security Engineer - DevSecOps to weave automated security into our development lifecycle on Google Cloud Platform. You will implement IaC security controls, integrate SCA and vulnerability scanners into CI/CD, and collaborate with cross-functional teams to balance speed with resilience.

You will deploy security policies, write automation scripts, and support developers with scalable guardrails across GKE/EKS environments.