Jobs / CME Group
Cloud Security Engineer - DevSecOps
CME Group · Belfast, NIR, United Kingdom
Belfast, NIR, United KingdomExp: 4-6 yrsHybrid
Remuneration
Bonus Programme; Equity Programme; Employee Stock Purchase Plan; comprehensive benefits package
Location
Belfast, NIR, United Kingdom
Visa sponsorship
Not specified
Job summary
The Cloud Security Engineer embeds automated security controls into cloud engineering and development lifecycles, enabling teams to deploy securely across Google Cloud Platform and AWS. The role integrates security analysis and vulnerability scanning into CI/CD pipelines, validates Infrastructure as Code, secures Kubernetes environments, and builds operational metrics and dashboards using tools such as Terraform, GCP Anthos Configuration Management, AWS CodeDeploy, Python, and Go.
Benefits
Private medical and dental coverageMental health benefit programmeGroup pension planIncome protectionLife assuranceCycle to Work schemeElectric vehicle car benefit schemeGym membershipFamily leaveEducation assistanceEmployee development training and certification
Qualifications
- Approximately 4–6+ years of experience in application development, infrastructure engineering, or DevSecOps.
- Experience deploying, configuring, and securing workloads in public cloud environments, particularly GCP or AWS.
- Knowledge of Infrastructure as Code and configuration management tools such as Terraform, Ansible, or Puppet.
- Experience embedding automated security gates in CI/CD platforms, particularly Jenkins, Git, and Maven.
- Scripting or coding experience with Python, Bash, Go, or Groovy.
- Familiarity with Docker and Kubernetes, including GKE or EKS.
- Familiarity with cloud monitoring and telemetry tools such as GCP Cloud Operations, AWS CloudWatch, or Splunk.
- Knowledge of security baselines and frameworks such as CIS Benchmarks, NIST 800 series, or PCI-DSS.
- Collaborative technical communication skills.
- Bachelor's or Master's degree in a related discipline, or equivalent practical experience.
Responsibilities
- Integrate automated security capabilities into CI/CD pipelines, including static analysis, software composition analysis, and vulnerability scanning.
- Implement and maintain Infrastructure as Code security controls and deployment validation tools.
- Develop and deploy Infrastructure as Code templates and security policies.
- Write automation scripts and integration tooling to support security guardrails.
- Maintain and troubleshoot container security tooling across Kubernetes environments.
- Build security service metrics, alerts, and dashboards.
- Publish vulnerability remediation metrics and operational documentation.
- Support application teams and collaborate with engineering teams on cloud-native security controls.
Skills
AnsibleAWSBashCloudFormationCloudWatchDockerEKSGCPGitGKEGoJenkinsKubernetesMavenPuppetPythonSplunkTerraformGitHub Actions
Certifications
GCP Associate Cloud EngineerGCP Professional Cloud Security EngineerCertified Kubernetes Administrator (CKA)CSSLP
Degrees
Bachelor's or Master's degree in Computer Science, Information Systems, or a rel
Languages
PythonGoGroovyBash
Industry
Financial servicesDerivatives markets
Relocation
No