Jobs / Fisher Investments
Information Security Engineer - DevSecOps
Fisher Investments · Camas, WA, United States
Camas, WA, United StatesExp: 5+ yrs125,000-165,000 USD/yearlyOnsite
Remuneration
$125,000–$165,000 annual base salary in Washington; discretionary bonus and benefits
Location
Camas, WA, United States
Visa sponsorship
Not specified
Job summary
The Information Security Engineer (DevSecOps) builds and manages enterprise security controls across CI/CD pipelines, application development, cloud infrastructure, and infrastructure-as-code environments. The role secures delivery platforms, assesses cloud posture, correlates source-code and cloud-workload findings, and automates policy and vulnerability controls using technologies such as GitHub Advanced Security, CNAPP, Terraform, and Azure or AWS.
Benefits
100% paid medical, dental, and vision premiums for eligible employees and qualif50% 401(k) match, up to the IRS maximum20 days of paid time off and 10 paid holidaysPaid primary caregiver leaveFamily-forming, fertility, hormonal health, and backup care supportDiscretionary bonus based on firm and individual performance
Qualifications
- At least 5 years of professional experience in technology or information security.
- At least 2 years of hands-on DevSecOps engineering or security automation experience in software delivery and cloud environments.
- Ability to write, test, debug, and maintain code or scripts in PowerShell, Python, C#, Java, or comparable languages.
- Experience with Azure or AWS infrastructure and containerized workloads.
- Experience with CNAPP products and cloud security posture management, including operating or evaluating multiple products.
- At least 1 year of experience with related technologies and practices, such as GitHub Advanced Security, GitHub Actions, Terraform, secure coding, Kubernetes security, or policy frameworks.
- Bachelor's degree in Computer Science or Technology, or equivalent experience.
Responsibilities
- Develop and manage DevSecOps security services, including GitHub Advanced Security and CNAPP platforms.
- Secure CI/CD platforms and implement pipeline security controls and vulnerability response.
- Assess cloud security posture, correlate source-code and cloud-workload findings, and recommend risk remedies.
- Contribute to secure coding, cloud security, and architecture standards using NIST, CIS, and ISO frameworks.
- Standardize DevSecOps processes and automate security controls with code and scripts.
- Support implementation of cloud security policies and CNAPP configuration as code using Terraform or comparable IaC tools.
- Recommend improvements to security controls, including CNAPP and policy-as-code integration into CI/CD pipelines.
- Develop architectural diagrams and implementation plans.
Skills
AWSAzureC#GitHubGitHub ActionsJavaKubernetesOpen Policy AgentPowerShellPythonTerraform
Degrees
Bachelor's degree in Computer Science or Technology, or equivalent experience
Languages
PowerShellPythonC#Java
Industry
Investment
Relocation
No