Cloud Security Lead & DevSecOps Architect

Francisco Partners; Belfast City District; On-site; GBP 75,000 - 110,000; Full time

Job summary

Black Duck Software, Inc. is seeking a Senior Cloud Security Engineer to secure cloud-based SaaS platforms at scale. You will design and operate security controls across AWS, GCP, and other environments, shaping security standards and driving remediation with engineering partners.

In this role, you will lead cross-functional cloud security initiatives, coach peers, and integrate security into CI/CD pipelines, contributing to a stronger security posture across the organization.

Qualifications

• 5–7+ years of information security experience with cloud security focus
• Bachelor’s degree in Information Security, Computer Science, or related field
• Specialized cloud security knowledge with depth in at least one major provider
• Hands-on experience with containerized/Kubernetes platforms
• Proficiency in Python and/or Bash scripting for security automation
• Experience designing, implementing and operating security controls at scale

Responsibilities

• Act as Cloud Security SME; develop cloud security standards and best-practice documentation
• Design, build, and operate security controls for SaaS services on AWS, GCP, and other clouds
• Monitor cloud resources to identify risks and drive remediation with owners
• Lead cloud security projects and initiatives; influence architecture and strategy
• Integrate security controls into CI/CD pipelines and engineering workflows
• Coach engineers and lead security reviews and threat modeling sessions
• Communicate risks and recommendations to executives and stakeholders

Skills

Cloud security

Python scripting

Bash scripting

Security automation

Project leadership

Education

Bachelor's degree in Information Security/CS

Tools

Kubernetes

Terraform

CloudFormation

Helm

CSPM/CNAPP tools

Job description

Black Duck Software, Inc. is seeking a Senior Cloud Security Engineer to secure cloud-based SaaS platforms at scale. You will design and operate security controls across AWS, GCP, and other environments, shaping security standards and driving remediation with engineering partners.

In this role, you will lead cross-functional cloud security initiatives, coach peers, and integrate security into CI/CD pipelines, contributing to a stronger security posture across the organization.