DevSecOps Engineer: Cloud Security & CI/CD Mastery

Fisher Investments; Plano (TX); Sur place; USD 120 000 - 170 000; Plein temps

Avantages offerts par ce poste

Full benefits (medical, dental, vision

401(k) match

PTO & holidays

Family support programs

Hybrid work option

Résumé du poste

Fisher Investments is seeking an Information Security Engineer (DevSecOps) to drive secure DevOps practices across enterprise CI/CD pipelines. You will collaborate with Security, Technology, and Governance teams to implement CNAPP controls and secure cloud workloads using IaC tooling and policy-as-code approaches.

The role emphasizes secure coding, cloud security standards, and threat remediation in Azure/AWS environments, with opportunities to influence global security posture.

Qualifications

• 5+ years of professional experience in technology or information security.
• 2+ years DevSecOps engineering with security automation in software delivery and cloud environments.
• Experience with Azure or AWS, CNAPP, CSPM, IaC, and policy-as-code.

Responsabilités

• Develop and manage DevSecOps security services, including CNAPP platforms and GitHub Advanced Security.
• Secure CI/CD pipelines, implement controls, and manage vulnerability response with cross-functional teams.
• Assess cloud security posture and map findings from code to cloud workloads.
• Contribute to secure coding standards and architecture using NIST/CIS/ISO guidance.
• Automate security controls through coding and scripting, standardizing processes.
• Support CNAPP configuration as code and IaC tooling like Terraform in pipelines.
• Create architectural diagrams and implementation plans for security initiatives.

Connaissances

DevSecOps

CI/CD security

Cloud security

PowerShell

Python

C#

Kubernetes security

OPA/Rego

IaC/policy-as-code

Formation

Bachelor's Degree in Computer Science

Outils

GitHub Advanced Security

GitHub Actions

Terraform

CNAPP platforms

CSPM

Description du poste

Fisher Investments is seeking an Information Security Engineer (DevSecOps) to drive secure DevOps practices across enterprise CI/CD pipelines. You will collaborate with Security, Technology, and Governance teams to implement CNAPP controls and secure cloud workloads using IaC tooling and policy-as-code approaches.

The role emphasizes secure coding, cloud security standards, and threat remediation in Azure/AWS environments, with opportunities to influence global security posture.