DevSecOps Engineer — Secure SDLC & Cloud Guardrails

stepstone.fr; Dublin; On-site; EUR 90,000 - 130,000; Full time

Job summary

StepStone is seeking a DevSecOps Engineer to embed security into the SDLC and CI/CD pipelines, focusing on application security guardrails and developer tooling. You will provide hands-on cloud security across AWS, with Azure proficiency, collaborating with infrastructure and DevOps teams to harden posture and enable delivery speed.

You will implement guardrails, threat model services, and manage CSPM/CNAPP tooling, ensuring secure SDLC practices and audit readiness.

Qualifications

• Strong experience embedding security into CI/CD pipelines and SDLC (SAST/DAST/SCA) with policy gates.
• Threat modeling and secure coding guidance; collaborate with developers to land fixes without blocking delivery.
• Hands-on AWS security (IAM, VPC, KMS, encryption); Azure/GCP security proficiency.
• IaC expertise (Terraform, CloudFormation; Bicep or Deployment Manager a plus) and scripting in Python.
• Knowledge of vulnerability mgmt, logging, secrets mgmt, and incident response.
• Experience operating CNAPP/CSPM platforms (Wiz preferred) and remediating findings.
• Familiarity with container/Kubernetes security (EKS/AKS/GKE) and AI/ML security desirable.

Responsibilities

• Own and mature the DevSecOps program with guardrails across CI/CD pipelines.
• Threat-model new services and translate findings into actionable guardrails for developers.
• Create reusable IaC patterns and templates adopted by engineering teams.
• Triage and remediate findings across cloud and app layers; reduce backlog.
• Establish cloud security guardrails on AWS; extend to Azure with Defender and Policy.
• Harden IAM, network exposure, and encryption; enforce least privilege.
• Extend posture mgmt to Azure and/or GCP controls.
• Reduce internet-facing exposure and support SOC 2, audit, and compliance.

Skills

CI/CD security

SAST

DAST

SCA

infrastructure-as-code

Python

AWS security

Azure security

GCP security

Threat modeling

Kubernetes security

CNAPP/CSPM Wiz

Education

Bachelor's degree in CS/InfoSec

4+ years DevSecOps / cloud security

DevSecOps or App Sec cert

SOC 2 / ISO27001 / SOX exposure

Tools

Terraform

CloudFormation

Bicep

GCP Deployment Manager

Python

Wiz

Job description

StepStone is seeking a DevSecOps Engineer to embed security into the SDLC and CI/CD pipelines, focusing on application security guardrails and developer tooling. You will provide hands-on cloud security across AWS, with Azure proficiency, collaborating with infrastructure and DevOps teams to harden posture and enable delivery speed.

You will implement guardrails, threat model services, and manage CSPM/CNAPP tooling, ensuring secure SDLC practices and audit readiness.