Senior DevSecOps Engineer: Secure SDLC & Cloud

CME Group; Chicago (IL); In loco; USD 132.000 - 220.000; Tempo pieno

Vantaggi offerti da questo lavoro

Annual bonus

Equity program

Health coverage

401(k) plan

Pension plan

Paid time off

Descrizione del lavoro

CME Group seeks a Lead Security Engineer - DevSecOps to shape software security design and secure SDLC practices across the enterprise. You will mentor, design secure reference architectures, and contribute to security strategy within the GIS group and beyond.

The role demands deep software engineering and expertise in cryptography, authentication, secure data handling, and modern cloud-native architectures.

Competenze

• A Bachelor's or Master's degree in Computer Science, Information Systems or related field, or equivalent work experience.
• 8+ years of application development and/or infrastructure engineering experience.
• 2+ years of hands-on experience deploying applications in the Cloud (AWS, GCP, Azure).
• Experience using DevSecOps IaC tools like CloudFormation, Terraform, Chef, Puppet, or Ansible.
• Experience with DevSecOps tools such as Jenkins, Maven, Git, and Ansible.
• Experience with Docker and Kubernetes containers.
• Experience scripting for AWS provisioning using AWS CLI/API, Python, Bash, and Git.
• Experience with Java, Python, JavaScript (Node.js) and possibly .NET (C#, C++).
• Experience with logging/monitoring tools such as CloudWatch and Splunk.
• Experience with Jira and related ticketing systems.
• Familiarity with Atlassian SDK and development processes is desirable.
• Experience with UX/UI design and client-side visualization libraries (e.g., D3.js) is desirable.
• Knowledge of Cloud Native patterns and ability to collaborate across teams and geographies.
• Excellent oral and written communication skills.
• Experience designing, implementing, and supporting large-scale software products.
• Certifications such as CISSP, CSSLP, GSSP-*, CASE, CERT Secure Coding, PECB Lead Secure App Developer are desirable.

Mansioni

• Actively drive designs of secure software reference designs and enterprise-wide solutions.
• Contribute to Secure SDLC implementation and maturity across GIS team.
• Conduct unit, integration, and system testing of code and projects.
• Demonstrate strong programming proficiency in at least one primary language.
• Write unit tests for test-driven implementations with minimal guidance.
• Demonstrate knowledge of database architectures and secure data access.
• Identify opportunities for code optimization and performance improvements.
• Provide input for code reviews, environment builds, and release notes.
• Create development documentation such as use cases, design specs, and data flows.
• Review code to identify defects and help troubleshoot issues.
• Collaborate with multiple divisions to establish next-gen secure SDLC at CME Group.

Conoscenze

Java

Python

JavaScript/Node.js

C#/C++

Cloud platforms (AWS/GCP/Azure)

CI/CD practices

Security design

Effective communication

Formazione

Bachelor’s or Master’s in Computer Science / Information Systems

Strumenti

Jenkins

Maven

Git

Ansible

Docker

Kubernetes

Terraform

CloudFormation

Splunk / CloudWatch

Descrizione del lavoro

CME Group seeks a Lead Security Engineer - DevSecOps to shape software security design and secure SDLC practices across the enterprise. You will mentor, design secure reference architectures, and contribute to security strategy within the GIS group and beyond.

The role demands deep software engineering and expertise in cryptography, authentication, secure data handling, and modern cloud-native architectures.