DevSecOps Engineer: Cloud Security & CI/CD

StepStone Group; Dublin; On-site; EUR 90,000 - 130,000; Full time

Job summary

StepStone seeks a DevSecOps Engineer to embed security into the SDLC and CI/CD pipelines across AWS, Azure, and GCP from its Ireland, Dublin base. You will lead security guardrails, automate secure patterns, and collaborate with development teams to maintain delivery velocity with strong posture.

You’ll operationalize Wiz CSPM, drive governance, and support SOC 2/audit readiness while advancing secure infrastructure with Terraform/CloudFormation. Dublin-based role.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.

Responsibilities

• Own and mature the firm’s DevSecOps program, embedding security into CI/CD pipelines to catch issues before deployment.
• Partner with application development teams to threat-model new services and translate findings into guardrails and remediation guidance for developers.
• Build and maintain secure-by-default patterns, reusable infrastructure-as-code modules, and golden pipeline templates adopted by engineering teams.
• Operationalize Wiz CNAPP/CSPM platform: triage, prioritize, and remediate findings across cloud and application layers.
• Establish and codify cloud security guardrails on AWS (IAM, VPC, encryption) and extend to Azure/GCP.
• Harden identity/access and network exposure across cloud workloads.
• Drive guardrails to Azure with Defender for Cloud, Azure Policy, Entra ID, and equivalents.
• Reduce internet-facing exposure by resolving high-severity findings.
• Provide security evidence for SOC 2, audits, and compliance with secure SDLC practices.

Skills

SAST

DAST

SCA

IaC scanning

Threat modeling

Python

Policy as code

Secrets management

CI/CD integration

Education

Bachelor’s degree in CS/Info Security

Tools

AWS

Azure

GCP

Terraform

CloudFormation

Bicep

Wiz

Job description

StepStone seeks a DevSecOps Engineer to embed security into the SDLC and CI/CD pipelines across AWS, Azure, and GCP from its Ireland, Dublin base. You will lead security guardrails, automate secure patterns, and collaborate with development teams to maintain delivery velocity with strong posture.

You’ll operationalize Wiz CSPM, drive governance, and support SOC 2/audit readiness while advancing secure infrastructure with Terraform/CloudFormation. Dublin-based role.