DevSecOps Security Engineer: Cloud & CI/CD

Fisher Investments; Camas (WA); Hybrid; USD 125,000 - 165,000; Full time

Benefits offered by this job

Medical premiums paid for employee and

401(k) match

PTO and holidays

Family support programs

Hybrid work option

Job summary

Fisher Investments is seeking an Information Security Engineer (DevSecOps) to support our global growth from the Technology Department. You will build and secure CI/CD pipelines, align with CNAPP and CSPM controls, and automate security across cloud workloads using IaC tooling with Terraform or similar.

Ideal candidates have 5+ years in tech or information security, 2+ years in DevSecOps, and hands-on experience with Azure/AWS, scripting, and secure coding in modern languages.

Qualifications

• 5+ years of professional experience in technology or information security.
• 2+ years of hands-on DevSecOps engineering or implementing security automation within software delivery and cloud environments.
• Experience with cloud infrastructure (Azure/AWS) and containerized workloads.
• Knowledge of CNAPP products and CSPM with multiple product usage.
• Infrastructure as code and policy-as-code management of cloud security policies.

Responsibilities

• Develop and manage the configuration, maintenance, and operations of DevSecOps security services.
• Secure CI/CD platforms and implement pipeline security practices and vulnerability response.
• Assess cloud security posture and correlate findings to cloud workloads for risk remediation.
• Contribute to secure coding, cloud security, and architecture standards using NIST, CIS, ISO.
• Automate security controls through coding and scripting; support CNAPP configuration as code.
• Create architectural diagrams and implementation plans for security initiatives.

Skills

PowerShell

Python

C#

Java

CI/CD pipeline development

Security automation

Azure

AWS

CNAPP

CSPM

IaC

Policy-as-code

Education

Bachelor's Degree in Computer Science or Technology

Tools

GitHub Advanced Security

GitHub Actions

Terraform

Kubernetes Security

OPA / Rego

Job description

Fisher Investments is seeking an Information Security Engineer (DevSecOps) to support our global growth from the Technology Department. You will build and secure CI/CD pipelines, align with CNAPP and CSPM controls, and automate security across cloud workloads using IaC tooling with Terraform or similar.

Ideal candidates have 5+ years in tech or information security, 2+ years in DevSecOps, and hands-on experience with Azure/AWS, scripting, and secure coding in modern languages.