Senior Cloud Security Engineer - Build Secure DevSecOps

Black Duck Software, Inc.; Belfast City District; On-site; GBP 90,000 - 120,000; Full time

Job summary

Black Duck Software, Inc. seeks a Cloud Security SME to define baseline security for our SaaS platforms. You will design and run security controls across AWS, GCP, and other cloud environments, and partner with engineering to embed security into CI/CD pipelines.

Candidates bring 5–7+ years in information security, hands-on cloud security in multi-cloud, and scripting in Python or Bash. You will lead cross‑functional security projects and mentor engineers while advancing DevSecOps across the

Qualifications

• 5–7+ years of experience in information security with demonstrated depth in cloud security.
• Minimum 3 years hands-on experience securing cloud environments (AWS, GCP, Azure, or equivalent) at scale.
• Specialized knowledge of cloud security principles, architectures, and controls.
• Hands-on experience with containerized platforms and Kubernetes; experience with monitoring, logging, CSPM/CNAPP tools.

Responsibilities

• Act as Cloud Security SME; develop and maintain cloud security standards, policies, procedures, and best‑practice documentation.
• Design, build, and operate security controls for SaaS services running on AWS, GCP, and other cloud environments.
• Continuously monitor cloud resources and configurations to identify security risks; triage findings and drive remediation with resource owners.
• Identify threats through vulnerability assessments, penetration testing support, and log analysis; ensure controls meet SOC 2 and ISO 27001.
• Automate cloud security controls, data collection, and workflows using Python, Bash, cloud APIs, and infrastructure as code.
• Operate and enhance the cloud security tooling ecosystem, including logging, monitoring, CSPM/CNAPP, vulnerability management, and detection platforms.
• Integrate security controls into CI/CD pipelines and engineering delivery workflows; advance DevSecOps practices.
• Lead containment, forensic analysis, and remediation for cloud security incidents in partnership with CSIRT and engineering teams.

Skills

Cloud security

Python scripting

Bash scripting

Infrastructure as code

CI/CD security

Leadership

Security automation

Education

Bachelor's degree in Information Security or Computer Science

Tools

Kubernetes

Terraform

CloudFormation

Helm

CSPM/CNAPP tools

Job description

Black Duck Software, Inc. seeks a Cloud Security SME to define baseline security for our SaaS platforms. You will design and run security controls across AWS, GCP, and other cloud environments, and partner with engineering to embed security into CI/CD pipelines.

Candidates bring 5–7+ years in information security, hands-on cloud security in multi-cloud, and scripting in Python or Bash. You will lead cross‑functional security projects and mentor engineers while advancing DevSecOps across the