> Markdown version of [/jobs/ext/4652757-cloud-security-engineer-devsecops](https://www.wearedevelopers.com/jobs/ext/4652757-cloud-security-engineer-devsecops). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Security Engineer - DevSecOps

- **Company:** Chicago Mercantile Exchange
- **Location:** Belfast, United Kingdom
- **Experience:** Experienced
- **Salary:** £91,156
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Bash Shell, Cloud Computing, Cloud Computing Security, Cloud Engineering, Configuration Management, Information Systems, System Configuration, Continuous Integration, DevOps, Groovy, Python (Programming Language), Apache Maven, PCI Data Security Standards, Reliability Engineering, Ansible, Software Engineering, Software Vulnerability Management, YAML, Data Logging, Scripting, Google Cloud, AWS CodeDeploy, Infrastructure as Code (IaC), Git, Cloudformation, Kubernetes, Infrastructure Automation Frameworks, Information Technology, Deployment Automation, Hashicorp, CIS Benchmarks, Cloudwatch, Puppet, Terraform, Splunk, Devsecops, Docker, Jenkins, Golang
- **Published:** November 10, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5960211544

## About the Role

* Applied technical background with approximately 4-6+ years of experience across application development, infrastructure engineering, or dedicated DevSecOps practices.
 * Hands-on proficiency deploying, configuring, and securing workloads in public cloud environments, with an emphasis on Google Cloud Platform (GCP) or AWS.
 * Strong working knowledge of Infrastructure as Code and configuration management tools such as Terraform, Ansible, or Puppet.
 * Practical experience embedding automated security gates within CI/CD platforms, particularly Jenkins, Git, and Maven.
 * Proven scripting and coding abilities in languages such as Python, Bash, Go, or Groovy to automate complex pipeline actions.
 * Working familiarity with containerization and orchestration platforms, including Docker and Kubernetes (GKE/EKS).
 * Familiarity with cloud-native monitoring and telemetry suites such as GCP Cloud Operations/Logging, AWS CloudWatch, or Splunk.
 * Working knowledge of industry security baselines and regulatory frameworks (e.g., CIS Benchmarks, NIST 800 series, PCI-DSS).
 * Clear, collaborative technical communication skills with a mindset geared toward enablement rather than friction.
 * Bachelor's or Master's degree in Computer Science, Information Systems, or a related discipline; or equivalent practical experience.
 * Relevant cloud or security certifications are advantageous (e.g., GCP Associate Cloud Engineer, GCP Professional Cloud Security Engineer, CKA, or CSSLP).

## Description

Job Summary: As a Cloud Security Engineer - DevSecOps at CME Group, you will be instrumental in safeguarding the critical market infrastructure that powers the global derivatives ecosystem. Embedded within our cloud engineering initiatives, your mission is to weave automated security directly into the fabric of our development lifecycle on Google Cloud Platform (GCP). This role bridges velocity and resilience-empowering engineering teams to deploy rapidly while establishing automated deployment-time controls, immutable infrastructure validation, and proactive vulnerability management., * Implement and maintain Infrastructure as Code (IaC) security controls and deployment validation tools using Terraform, GCP Anthos Configuration Management (ACM), and AWS CodeDeploy.

 * Develop, package, and deploy robust IaC templates and security policies utilizing HashiCorp Configuration Language (HCL), Kubernetes Resource Model (KRM) YAML, and CloudFormation.
 * Write robust automation scripts and integration tooling using Python, Go, Groovy, and Bash to facilitate seamless developer adoption of security guardrails.
 * Maintain and troubleshoot container security tooling deployed across Kubernetes environments, including Google Kubernetes Engine (GKE) and Amazon EKS.
 * Build observability metrics, alerts, and dashboards for security services utilizing Site Reliability Engineering (SRE) and DevOps principles.
 * Publish actionable vulnerability remediation metrics and operational documentation, offering direct support to application teams through internal developer channels.
 * Partner collaboratively with peer engineers and cross-divisional squads to ensure alignment between security controls and modern cloud-native architectures.