Senior Security Engineer

Lead DevSecOps Engineer A leading global financial services firm is seeking an experienced Lead DevSecOps Engineer to join their dynamic team. This firm operates across a range of markets, providing essential services in commodities, energy, and financial sectors with a global reach and a strong balance sheet. Key Responsibilities : Secure and enhance the CI/CD platform, ensuring access control, secure build/deploy agents, and encrypted secrets. Implement security policies in CI/CD pipelines, run SAST and DAST, and remove unencrypted secrets from version control. Continuously monitor cloud platforms (AWS and Azure), addressing security concerns and remediating through Infrastructure as Code (IaC). Enforce access controls and least privilege models for cloud resources. Write and maintain automated security tests for platforms and applications, ensuring developer awareness. Automate penetration testing and ensure security controls are functioning effectively. Review cloud data storage and backup processes to mitigate ransomware risks. Develop security policies, standards, and best practices for architectural design. Advocate for security practices across development and operational teams. Stay current on security threats and industry best practices. Skills & Experience : Proficiency in Python or PowerShell. Strong background in DevSecOps or InfoSec with a passion for security. Experience collaborating with development and operations teams, securing pipelines, and enforcing security policies in cloud environments (AWS/Azure) using IaC. Expertise in containerized workloads, vulnerability detection, and securing runtimes. Knowledge of securing data at rest and in transit. Strong networking fundamentals. If you're ready to take the next step in your DevSecOps career and work in a fast-paced, cutting-edge environment, we want to hear from you This firm is an equal opportunity employer, committed to fostering a diverse and inclusive workplace.