Cloud Security Engineer - DevSecOps

Job Overview

Join CME Group as a Cloud Security Engineer specialized in DevSecOps to protect vital market infrastructure supporting the worldwide derivatives industry. Embedded within the cloud engineering team, your goal is to incorporate automated security measures seamlessly into the software development lifecycle on Google Cloud Platform (GCP), balancing rapid deployment velocity with robust security controls.

Responsibilities

• Design and embed automated security features into CME’s CI/CD pipelines, integrating static code analysis, software composition analysis (SCA), and vulnerability scanners within developer workflows.
• Create and sustain Infrastructure as Code (IaC) security controls and deployment validation tools using Terraform, GCP Anthos Configuration Management (ACM), and AWS CodeDeploy.
• Develop, package, and deploy IaC templates and security policies using HashiCorp Configuration Language (HCL), Kubernetes Resource Model (KRM) YAML, and AWS CloudFormation.
• Write automation scripts and integration tools with Python, Go, Groovy, and Bash to make security safeguards easily adoptable by developers.
• Manage and troubleshoot container security tools on Kubernetes platforms such as Google Kubernetes Engine (GKE) and Amazon EKS.
• Implement observability measures including security service metrics, alerts, and dashboards, leveraging Site Reliability Engineering (SRE) and DevOps methodologies.
• Provide actionable vulnerability remediation data and operational documents, supporting application teams via internal developer channels.
• Collaborate across engineering teams and divisions to ensure security controls align with modern cloud-native system architectures.

Qualifications

• Approximately 4 to 6 or more years of technical experience in application development, infrastructure engineering, or DevSecOps roles.
• Hands-on expertise managing secure workload deployment in public cloud environments, especially GCP or AWS.
• Strong proficiency with Infrastructure as Code and configuration management tools like Terraform, Ansible, or Puppet.
• Experience integrating automated security mechanisms into CI/CD platforms such as Jenkins, Git, and Maven.
• Proficient scripting capabilities using Python, Bash, Go, or Groovy to automate complex pipeline operations.
• Familiarity with containerization and orchestration tools including Docker and Kubernetes (GKE/EKS).
• Knowledge of cloud-native observability tools like GCP Cloud Operations/Logging, AWS CloudWatch, or Splunk.
• Understanding of security standards and compliance frameworks including CIS Benchmarks, NIST 800 series, and PCI-DSS.
• Effective technical communication skills focused on enabling and supporting colleagues collaboratively.
• Bachelor’s or Master’s degree in Computer Science, Information Systems, or a related field, or equivalent experience.
• Preferred certifications include GCP Associate Cloud Engineer, GCP Professional Cloud Security Engineer, Certified Kubernetes Administrator (CKA), or Certified Secure Software Lifecycle Professional (CSSLP).

Benefits

• Participation in Bonus and Equity programs
• Employee Stock Purchase Plan (ESPP)
• Private medical and dental insurance coverage
• Mental health support programs
• Group pension plan and income protection
• Life assurance coverage
• Cycle to Work and electric vehicle schemes
• Gym membership
• Family leave policies
• Educational assistance for MBA, advanced degrees, or bachelor’s programs
• Access to ongoing staff development and certification training
• Flexible hybrid working arrangements

Company Profile

CME Group stands as the leading derivatives marketplace globally, offering the opportunity to impact financial markets worldwide and foster industry transformations. The company values a diverse and inclusive workforce and is committed to equal employment opportunities without discrimination.

Additional Information

CME Group maintains vigilant recruitment practices to safeguard candidates from fraudulent activities during the hiring process.