> Markdown version of [/jobs/ext/509665-information-security-engineer-cspm-specialist](https://www.wearedevelopers.com/jobs/ext/509665-information-security-engineer-cspm-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Engineer (CSPM Specialist) - **Company:** Hudson - **Location:** Cincinnati, OH, United States (Remote available) - **Experience:** Expert - **Salary:** $83,200.0 - $87,360.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Agile Methodology, Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, DevOps, Github, OpenShift, Secure Coding, Software Engineering, Systems Integration, Google Cloud, HybridCloud, Infrastructure as Code (IaC), Containerization, Kubernetes, Opsworks, Terraform, Prisma Cloud Platform, Devsecops, Docker, Security Orchestration, Automation & Response, Jenkins - **Published:** June 7, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=7ed3039bc9ff8526 ## About the Role Do you have experience in Terraform?, Must-Have * Cloud Security Engineering * Public Cloud Platforms (AWS, Azure, GCP) * Agile Methodologies * DevOps Practices * CI/CD Pipelines * Jenkins * GitHub * Terraform * Infrastructure as Code (IaC) * Containerization Technologies (Docker, Kubernetes, OpenShift, etc.) * Security Architecture & Engineering * Security Automation * Cloud Governance & Risk Management Nice-to-Have * Container Security Scanning * Prisma Cloud * AWS Config * Cloud Security Posture Management (CSPM) Platforms * Kubernetes Security * Financial Services Industry Experience * DevSecOps Program Experience Ideal Candidate Profile The ideal candidate is a hands-on cloud security engineer who understands both security and modern software delivery practices. They have experience securing cloud-native environments, integrating security into CI/CD pipelines, and leveraging automation to improve security posture at scale. Success in this role requires strong collaboration skills, the ability to influence engineering teams, and experience balancing security requirements with business objectives in highly regulated environments. ## Description Seeking an experienced Information Security Engineer (CSPM Specialist) to support enterprise cloud security initiatives for a major financial services organization. This role focuses on securing public and hybrid cloud environments through a combination of security engineering, automation, cloud governance, and DevSecOps practices. The ideal candidate will possess strong experience implementing and managing cloud security tooling, working within Agile environments, and integrating security controls into modern CI/CD pipelines. As a key member of the Information Security team, you will serve as both an engineer and consultant, helping product teams design, implement, and maintain secure cloud-native solutions while driving continuous improvement across cloud security posture management (CSPM) capabilities., * Serve as the primary security engineering resource on cloud-focused initiatives. * Design and implement secure architectures across public and hybrid cloud environments. * Partner with engineering teams to embed security throughout the software development lifecycle. * Evaluate and implement cloud security controls and best practices. CSPM & Security Tooling * Support and enhance Cloud Security Posture Management (CSPM) capabilities. * Engineer, deploy, and maintain enterprise security tools and platforms. * Develop automation to improve cloud security monitoring, remediation, and compliance reporting. * Configure and optimize cloud security policies and controls. DevSecOps & Automation * Integrate security controls into CI/CD pipelines and DevOps workflows. * Collaborate with development teams to implement Infrastructure as Code (IaC) security practices. * Leverage tools such as Jenkins, GitHub, Terraform, and cloud-native security services. * Promote secure development and deployment standards across engineering teams. Security Consulting & Governance * Advise Product Owners, Principal Engineers, and technical leadership on security architecture and operational considerations. * Assist in the development and maintenance of security standards, procedures, and guidelines. * Participate in security reviews, threat assessments, and risk mitigation activities. * Support ongoing compliance and regulatory initiatives. Operations & Incident Support * Participate in Information Security operational activities. * Support monitoring, maintenance, and optimization of security platforms. * Participate in on-call rotations supporting enterprise security operations. * Assist with security investigations and cloud security incident response activities. ## Related Videos - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)