Skip to content

Senior DevSecOps Engineer - Cloud Security

At Northwestern Mutual, we are strong, innovative and growing. We invest in our people. We care and make a positive difference.

Summary:

Northwestern Mutual is looking for enthusiastic technologists who want to grow their career in DevSecOps – Cloud Security! In this position, you will work with cross-functional teams while leveraging a set of diverse technologies and an automation first approach to strive towards improving the efficiency and effectiveness of our DevSecOps program with a focus on Cloud Security. This role requires experience in public cloud and an exceptional level of enthusiasm for cloud-native technology with a proven track record of self-motivated accomplishment. This is a great opportunity to build upon technical experience in cloud security engineering!

Responsibilities:

  • Engineer solutions with a focus on automation to reduce manual and repetitive tasks

  • Guide and advise application and engineering teams in the area of Cloud Security

  • Manage day-to-day support of DevSecOps capabilities integrated into our software development lifecycle including SAST, DAST, SCA, RASP, CSPM, and infrastructure vulnerability scanners

  • Manage technical support of DevSecOps capabilities and respond to service and critical issue tickets within service-level agreements

  • Design, implement, and maintain procedures, processes, and methodologies that support DevSecOps capabilities

  • Actively supervise, assess and recommend tactical and critical initiatives based on new and emerging threats posing risk to our company

  • Stay apprised of current and proposed security changes impacting regulatory, privacy and security industry standard methodologies

  • Manage remediation efforts after security assessment findings outline weaknesses requiring attention

  • Mentor other staff members to ensure consistency, quality and productivity of work

The ideal candidate is:

  • Passionate about security

  • A teammate and enjoy collaborating with cross-functional teams

  • A great communicator (written and verbal) with an ability to articulate complex topics in a clear and concise manner

  • Employs a flexible and constructive approach when solving problems

  • Proficient with development and scripting languages, Python and JavaScript preferred

  • Knowledgeable of traditional or cloud computing, including networking, compute, storage, app development, data, operations, or security

  • Experienced with Infrastructure as code concepts and tooling including Terraform, CloudFormation, and YAML

  • Continuously looking for opportunities to improve our processes and capabilities

  • Experienced working with application and engineering teams

  • A self-directed individual contributor

Experience:

  • Bachelor's or equivalent experience with an emphasis in computer science, computer engineering, software engineering, MIS related field

  • 1-3+ years' experience in AWS

  • 2-5+ years' experience in development, infrastructure, or cybersecurity

  • Understanding of applicable risk management frameworks from NIST, Cloud Security Alliance, and OWASP

  • Experience with CICD pipelines to automate application and infrastructure code deployments

  • Experience with workload orchestration platforms such as Kubernetes

  • Understanding of a wide-range of cybersecurity capabilities including application security, security engineering, identify & access management, incident response, logging & monitoring, and penetration testing

  • Relevant certifications from GIAC, ISC(2) and other recognized cybersecurity industry organizations

#LI-Post

Grow your career with a best-in-class company that puts our client’s interests at the center of all we do. Get started now!

W e are an equal opportunity/affirmative action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender identity or expression, sexual orientation, national origin, disability, age or status as a protected veteran, or any other characteristic protected by law.

If you work or would be working in Colorado or outside of a Corporate location, please click here for information pertaining to compensation and benefits.


FIND YOUR FUTURE

We’re excited about the potential people bring to Northwestern Mutual. You can grow your career here while enjoying first-class perks, benefits, and commitment to diversity and inclusion.