Cloud Security Engineer - DevSecOps

In this Cloud Security Engineer, DevSecOps role at CME Group you will integrate security into the cloud development lifecycle on GCP, balancing rapid delivery with automated security controls. You will embed security gates into CI/CD, manage IaC security, and oversee vulnerability management across cloud-native architectures. You’ll work with cross-functional teams to align security with modern cloud-native designs, enabling secure, scalable deployments. The role offers hands-on impact on critical market infrastructure and ongoing learning in a collaborative, growth-focused environment.

• Bonus Programme
• Equity Programme
• Employee Stock Purchase Plan (ESPP)
• Private Medical and Dental coverage
• Mental Health Benefit Programme
• Group Pension Plan

• Embed automated security into enterprise CI/CD pipelines (static analysis, SCA, vulnerability scanners)
• Implement and maintain IaC security controls and deployment validation tools using Terraform, GCP ACM, and AWS CodeDeploy
• Develop and deploy IaC templates and security policies (HCL, KRM YAML, CloudFormation)
• Create automation scripts and tooling (Python, Go, Groovy, Bash) for secure developer adoption
• Maintain container security tooling across Kubernetes environments (GKE, EKS)
• Build observability for security services using SRE/DevOps principles (metrics, alerts, dashboards)
• Publish remediation metrics and provide direct support to application teams
• Collaborate with engineers and cross-divisional squads to align security with cloud-native architectures

• 4–6+ years in application development, infra engineering, or DevSecOps
• Hands-on experience deploying and securing workloads in GCP or AWS
• Strong Infra as Code and configuration management knowledge (Terraform, Ansible, Puppet)
• Experience embedding automated security gates in CI/CD (Jenkins, Git, Maven)
• Proficient in scripting/coding languages (Python, Bash, Go, Groovy)
• Familiarity with Docker, Kubernetes (GKE/EKS)
• Knowledge of cloud-native monitoring/telemetry (GCP Cloud Operations/Logging, AWS CloudWatch, Splunk)
• Knowledge of security baselines/regulatory frameworks (CIS, NIST 800, PCI-DSS)
• Clear technical communication and enablement mindset
• Bachelor or Master degree in CS/IS or equivalent; relevant cloud/security certifications advantageous

• collaborative
• enablement-focused
• clear communication
• Terraform
• GCP Anthos Config Management (ACM)
• AWS CodeDeploy