DevSecOps Engineer: Cloud Security & CI/CD

StartupPlay; Dublin; On-site; EUR 90,000 - 120,000; Full time

Job summary

StepStone is seeking a DevSecOps Engineer to embed security into the software lifecycle and CI/CD pipelines. You will focus on application security guardrails, tooling for developers, and secure engineering practices across AWS, with Azure and GCP familiarity.

You will work with Infrastructure Engineering, application development, and DevOps teams to adopt guardrails, reduce exposure, and support rapid delivery. Equal opportunity employer and security-focused culture are emphasized.

Qualifications

• Strong experience embedding security into CI/CD pipelines and SDLC.
• Hands-on application security background with threat modeling.
• Proven AWS security expertise and Azure/GCP familiarity.
• Infrastructure-as-code tooling and scripting proficiency.

Responsibilities

• Own and mature the DevSecOps program with guardrails in CI/CD.
• Collaborate with development teams to model threats and implement fixes.
• Create reusable, secure-by-default patterns and templates.
• Operationalize cloud security tooling and remediate findings.
• Codify guardrails in AWS and extend to Azure/GCP environments.
• Strengthen IAM, network security, encryption, and least privilege.

Skills

CI/CD security

AWS security

Azure/GCP security

Infrastructure as code

Python scripting

Threat modeling

Vulnerability management

CNAPP/CSPM (Wiz)

Container/Kubernetes security

Education

Bachelor's degree in CS/InfoSecurity

4+ years DevSecOps experience

DevSecOps or security certification

Tools

Wiz

Terraform

CloudFormation

Kubernetes

Job description

StepStone is seeking a DevSecOps Engineer to embed security into the software lifecycle and CI/CD pipelines. You will focus on application security guardrails, tooling for developers, and secure engineering practices across AWS, with Azure and GCP familiarity.

You will work with Infrastructure Engineering, application development, and DevOps teams to adopt guardrails, reduce exposure, and support rapid delivery. Equal opportunity employer and security-focused culture are emphasized.