DevSecOps Engineer: Secure CI/CD & Cloud Guardrails

StepStone Group; Dublin; On-site; EUR 90,000 - 130,000; Full time

Job summary

StepStone Group is seeking a DevSecOps Engineer to embed security into the SDLC and CI/CD pipelines across AWS, Azure, and GCP. You will implement guardrails, threat-model new services, and automate secure-by-default patterns while working with Infrastructure Engineering and development teams.

You will operationalize cloud security platforms, manage IAM and encryption, and drive down exposure in public-facing workloads, supporting SOC 2 and audit readiness.

Qualifications

• Hands-on SDLC security integration with CI/CD pipelines.
• Experience collaborating with developers to fix security without blocking delivery.
• Strong AWS security experience; Azure/GCP security proficiency.
• Experience with IaC (Terraform/CloudFormation) and scripting (Python).
• Knowledge of vulnerability management, logging, and incident response.
• Experience with CNAPP/CSPM platforms (Wiz) and container security.

Responsibilities

• Mature DevSecOps program with guardrails in CI/CD.
• Threat-model new services at design time.
• Create secure-by-default IaC patterns.
• Operationalize cloud security platform (Wiz).
• Establish AWS guardrails and IAM least privilege.
• Extend posture management to Azure and GCP.
• Reduce internet exposure and support SOC 2/audit.
• Provide evidence for security controls and SDLC practices.

Skills

SAST

DAST

SCA

Infrastructure-as-code scanning

Secrets management

Policy as code

Threat modeling

Secure coding guidance

AWS security

Azure/GCP security

Terraform

CloudFormation

Bicep

Python scripting

Vulnerability management

Logging & detection

Incident response

CNAPP/CSPM (Wiz)

Container security

Kubernetes security

AI/ML security

Education

Bachelor's degree in Computer Science or related field

DevSecOps / application security credential

AWS Certified Security – Specialty

Tools

Wiz

Microsoft Defender for Cloud

Azure Policy

Entra ID

Terraform

CloudFormation

Bicep

GCP Deployment Manager

Job description

StepStone Group is seeking a DevSecOps Engineer to embed security into the SDLC and CI/CD pipelines across AWS, Azure, and GCP. You will implement guardrails, threat-model new services, and automate secure-by-default patterns while working with Infrastructure Engineering and development teams.

You will operationalize cloud security platforms, manage IAM and encryption, and drive down exposure in public-facing workloads, supporting SOC 2 and audit readiness.