Senior Cloud Security Engineer: DevSecOps Leader

Black-Duck-Software; Belfast (ME); On-site; USD 130,000 - 180,000; Full time

Job summary

Black Duck Software, Inc. is seeking a Cloud Security Subject Matter Expert to define and maintain security baselines across our SaaS platforms. You will shape security posture, develop and implement cloud security standards, and collaborate with engineering and IT to drive DevSecOps maturity.

Responsibilities include designing and operating controls on AWS, GCP, and other clouds, monitoring risks, leading incident response, and mentoring engineers in threat modeling and secure coding practices.

Qualifications

• 5–7+ years of information security experience with cloud security.
• Hands-on securing cloud environments (AWS, GCP, Azure) at scale.
• Bachelor’s degree or equivalent practical experience.
• Experience with containerized/Kubernetes platforms and cloud monitoring.
• Proficiency in Python or Bash for security automation; IaC with Terraform/CloudFormation/Helm.
• Ability to lead projects and coordinate cross-functional teams.

Responsibilities

• Design, build, and operate cloud security controls for SaaS on AWS, GCP, and other clouds.
• Monitor cloud resources and triage findings; drive remediation with owners.
• Lead containment and incident response for cloud security events.
• Integrate security into CI/CD pipelines and DevSecOps practices.
• Communicate risks and recommendations to executives.
• Coach engineers and lead security reviews and threat modeling.

Skills

Cloud security

Python scripting

Leadership

Threat modeling

Education

Bachelor’s degree in Information Security or Computer Science

Tools

Kubernetes

Terraform

CloudFormation

Helm

CSPM/CNAPP tools

Job description

Black Duck Software, Inc. is seeking a Cloud Security Subject Matter Expert to define and maintain security baselines across our SaaS platforms. You will shape security posture, develop and implement cloud security standards, and collaborate with engineering and IT to drive DevSecOps maturity.

Responsibilities include designing and operating controls on AWS, GCP, and other clouds, monitoring risks, leading incident response, and mentoring engineers in threat modeling and secure coding practices.