DevSecOps Engineer: Cloud Security & CI/CD

Fisher Investments; Camas (WA); Híbrido; USD 125.000 - 165.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% paid medical premiums

50% 401(k) match

PTO and holidays

Family support programs

Hybrid work option

Descripción de la vacante

Fisher Investments is seeking an Information Security Engineer (DevSecOps) to advance our security controls across CI/CD, cloud deployments, and IaC. You will partner with Information Security, Technology, and Governance teams to implement secure configurations and policy-as-code.

This role emphasizes automation, secure coding practices, and alignment with standards like NIST, CIS, and ISO. You will contribute to projects across application development, release management, and infrastructure as

Formación

• 5+ years in technology or information security.
• 2+ years in DevSecOps engineering or security automation in software delivery and cloud environments.
• Experience with CI/CD security, IaC and cloud security posture management.

Responsabilidades

• Develop and manage configuration, maintenance, and operations of DevSecOps security services.
• Secure CI/CD pipelines and implement vulnerability response across teams.
• Assess cloud security posture and correlate findings from code to cloud workloads.
• Develop secure coding and cloud security standards using NIST, CIS, ISO.
• Automate security controls through coding and scripting; standardize processes.
• Support CNAPP configuration as code using Terraform or similar IaC tooling.
• Create architectural diagrams and implementation plans.

Conocimientos

DevSecOps

CI/CD security

Cloud security (AWS/Azure)

CNAPP CSPM

IaC/Policy-as-code

GitHub Advanced Security

Terraform

Kubernetes security

OPA/Rego

NIST/CIS/ISO standards

Educación

Bachelor's Degree in Computer Science or equivalent

Herramientas

GitHub Actions

Terraform

Kubernetes

Descripción del empleo

Fisher Investments is seeking an Information Security Engineer (DevSecOps) to advance our security controls across CI/CD, cloud deployments, and IaC. You will partner with Information Security, Technology, and Governance teams to implement secure configurations and policy-as-code.

This role emphasizes automation, secure coding practices, and alignment with standards like NIST, CIS, and ISO. You will contribute to projects across application development, release management, and infrastructure as