Senior DevSecOps Engineer – Cloud & App Security Automation

Northwestern Mutual Investment Services, LLC; Milwaukee (WI); Hybrid; USD 119,000 - 178,000; Full time

Job summary

Northwestern Mutual is seeking experienced technologists to grow their career in DevSecOps – Application & Cloud Security. You will work with cross-functional teams to manage security tools with an automation-first mindset and help mature the Enterprise security posture.

The role emphasizes collaboration with architects and engineers, with a strong focus on security testing, CI/CD, and secure-by-default practices. A hybrid work model and ongoing development opportunities are offered.

Qualifications

• 4+ years' experience with cloud technologies and CICD pipelines (AWS, GitLab CI, Kubernetes)
• 5+ years' experience in development, infrastructure, or cybersecurity
• Experience conducting security tests (static and dynamic code analysis, software composition analysis, or penetration tests)
• Experience with CICD pipelines to automate application and infrastructure-as-code deployments

Responsibilities

• Engineer automation-focused solutions
• Guide application and engineering teams in the areas of Application and Cloud Security
• Operationally support Application & Cloud Security tools integrated into our software development lifecycle (SAST, DAST, SCA, CSPM, scanners)
• Monitor and recommend tactical and strategic initiatives based on threats
• Stay apprised of current security changes impacting best practices
• Implement remediation after findings outline weaknesses
• Mentor staff to ensure quality and productivity

Skills

Security mindset

Team collaboration

Communication

Python

JavaScript

Cloud technologies

CI/CD pipelines

DevSecOps

Cross-functional teamwork

Education

Bachelor's degree in CS/CE/SE/MIS

Tools

AWS

GitLab CI

Kubernetes

Job description

Northwestern Mutual is seeking experienced technologists to grow their career in DevSecOps – Application & Cloud Security. You will work with cross-functional teams to manage security tools with an automation-first mindset and help mature the Enterprise security posture.

The role emphasizes collaboration with architects and engineers, with a strong focus on security testing, CI/CD, and secure-by-default practices. A hybrid work model and ongoing development opportunities are offered.