DevSecOps Security Engineer — Cloud & CI/CD Champion

Fisher Investments; Plano (TX); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

100% paid medical, dental and vision

50% 401(k) match

20 days PTO + 10 holidays

Family support programs

Job summary

Fisher Investments is seeking an Information Security Engineer (DevSecOps) to advance our CI/CD security and cloud security posture. You will partner with Information Security and Technology teams to implement secure DevSecOps practices across enterprise pipelines, using CNAPP and IaC tooling to automate security controls.

You will contribute to secure coding standards, leverage Terraform and cloud security best practices, and help standardize processes across global teams in a fast-growing

Qualifications

• 5+ years in technology or information security.
• 2+ years in hands-on DevSecOps or security automation in software delivery and cloud environments.
• Experience with CI/CD, cloud providers (Azure/AWS), and CNAPP.
• Knowledge of IaC and policy-as-code with CI/CD integration.
• Application development and secure coding in multiple languages.

Responsibilities

• Develop and manage DevSecOps security services and CNAPP platforms.
• Secure CI/CD pipelines and implement vulnerability response.
• Assess cloud security posture and map findings to cloud workloads.
• Develop secure coding, cloud security, and architecture standards per standards (NIST/CIS/ISO).
• Automate security controls via coding and scripting and standardize processes.
• Support CNAPP configuration as code using IaC tooling like Terraform.
• Create architectural diagrams and implementation plans for initiatives.

Skills

DevSecOps

CI/CD security

Cloud security

PowerShell

Python

Java

C#

Azure

AWS

Kubernetes security

CNAPP

OPA / Rego

IaC / Terraform

Policy-as-code

Education

Bachelor's Degree in Computer Science or Technology

Tools

GitHub Advanced Security

GitHub Actions

Terraform

Job description

Fisher Investments is seeking an Information Security Engineer (DevSecOps) to advance our CI/CD security and cloud security posture. You will partner with Information Security and Technology teams to implement secure DevSecOps practices across enterprise pipelines, using CNAPP and IaC tooling to automate security controls.

You will contribute to secure coding standards, leverage Terraform and cloud security best practices, and help standardize processes across global teams in a fast-growing