Senior DevSecOps Engineer – Drive Cloud Security Automation

Northwestern Mutual; Milwaukee (WI); On-site; USD 119,000 - 178,000; Full time

Benefits offered by this job

Flexible work schedules

Concierge service

Comprehensive benefits

Employee resource groups

Job summary

Northwestern Mutual is seeking a DevSecOps professional focused on Application and Cloud Security to mature our security posture across the enterprise. You will work across cross-functional teams to manage security tools with an automation-first mindset, in an agile environment.

Ideal candidates bring 5+ years in development, infrastructure, or cybersecurity, 4+ years with cloud tech and CICD, and hands-on experience with security testing and modern DevOps practices.

Qualifications

• Bachelor's degree in computer science, computer engineering, software engineering or MIS-related field.
• 4+ years' experience with cloud technologies and CICD pipelines (AWS, Gitlab CI, Kubernetes).
• 5+ years' experience in development, infrastructure, or cybersecurity.
• Experience conducting security tests (static and dynamic code analysis, software composition analysis, or penetration tests).
• Experience with CICD pipelines to automate application and infrastructure-as-code deployments.

Responsibilities

• Engineer solutions with a focus on automation to reduce manual tasks.
• Guide and advise application and engineering teams in application and cloud security.
• Operationally support security tools integrated into the SDLC (SAST, DAST, SCA, CSPM).
• Monitor, assess and propose security initiatives based on threats.
• Stay updated on regulatory and security best practices.

Skills

Security mindset

Team collaboration

Communication

Problem solving

Python/JS scripting

Cloud technologies

CI/CD pipelines

Self-directed

Education

Bachelor's degree in CS/CE/SE or MIS

Tools

SAST

DAST

SCA

CSPM

Infrastructure as Code

GitLab CI

Kubernetes

Job description

Northwestern Mutual is seeking a DevSecOps professional focused on Application and Cloud Security to mature our security posture across the enterprise. You will work across cross-functional teams to manage security tools with an automation-first mindset, in an agile environment.

Ideal candidates bring 5+ years in development, infrastructure, or cybersecurity, 4+ years with cloud tech and CICD, and hands-on experience with security testing and modern DevOps practices.