Secure Cloud DevSecOps Engineer

CME Group; Belfast City District; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Bonus Programme

Equity Programme

Private Medical and Dental coverage

Mental Health Benefit Programme

Hybrid Working

Group Pension Plan

Income Protection

Life Assurance

Education Assistance - MBA/Advanced De

Job summary

CME Group seeks a Cloud Security Engineer - DevSecOps to weave automated security into our development lifecycle on Google Cloud Platform. You will integrate static analysis, SCA, and vulnerability scanners into CI/CD pipelines, and maintain IaC security controls using Terraform and ACM.

You will write automation scripts, manage container security in GKE/EKS, and publish remediation metrics while collaborating with engineering teams to align security with modern cloud-native architectures.

Qualifications

• Approx. 4–6+ years in application development, infra, or DevSecOps.
• Experience deploying and securing workloads in public clouds (GCP or AWS).
• Experience with IaC tools and secure CI/CD pipelines.
• Ability to write automation scripts (Python/Go/Bash).
• Familiarity with container security in Kubernetes environments.

Responsibilities

• Embed security into CME's CI/CD pipelines with SCA and vulnerability scanners.
• Maintain IaC security controls and deployment validation (Terraform, ACM, CloudFormation).
• Develop and deploy secure IaC templates and policies (HCL, YAML).
• Create automation tools to enable secure developer workflows.
• Manage container security tooling across GKE and EKS clusters.

Skills

CI/CD security

Cloud security

Security automation

Collaborative communication

Education

Bachelor's degree in Computer Science/IS

Master's degree (advantageous)

Tools

Terraform

GCP ACM

Kubernetes (GKE/EKS)

Terraform, Ansible, Puppet

Python

Go

Bash

CloudFormation

Jenkins/Git/Maven

Docker

Splunk / CloudWatch

Job description

CME Group seeks a Cloud Security Engineer - DevSecOps to weave automated security into our development lifecycle on Google Cloud Platform. You will integrate static analysis, SCA, and vulnerability scanners into CI/CD pipelines, and maintain IaC security controls using Terraform and ACM.

You will write automation scripts, manage container security in GKE/EKS, and publish remediation metrics while collaborating with engineering teams to align security with modern cloud-native architectures.