Hybrid Senior DevSecOps Engineer

at Northwestern Mutual

• Job title: Senior DevSecOps Engineer
• Job type: Full Time
• Experience level: Senior
• Salary: $102,060 - $189,540 per year
• Degree requirement: Bachelor's Degree
• Tech skills: AWS, Cloud, Cyber Security, Kubernetes, Linux, NoSQL, Unix
• Location requirements: Hybrid, Milwaukee, United States

About the role

• Senior DevSecOps Engineer engineering automation solutions and advising teams on data security practices. Managing support for tools integrated into on-premise and cloud database environments while mentoring staff.

Responsibilities

• Engineer solutions with a focus on automation to reduce manual and repetitive tasks
• Guide and advise application and engineering teams in the area of Data Security
• Manage day-to-day support of Data Security tools integrated into our on-premise and cloud database environments (relational & NoSQL)
• Manage technical support of Data Security capabilities and respond to service and escalation tickets within service-level agreements
• Design, implement, and maintain procedures, processes, and methodologies that support DevSecOps capabilities
• Actively monitor, assess, and recommend tactical and strategic initiatives based on new and emerging threats posing risk to our company
• Stay apprised of current and proposed security changes impacting regulatory, privacy, and security industry best practices
• Manage remediation efforts after security assessment findings outline weaknesses requiring attention
• Mentor other staff members to ensure consistency, quality and productivity of deliverables

Requirements

• Bachelor's or equivalent experience in computer science, computer engineering, software engineering, or an MIS related field
• 5+ years of experience in cloud and on-prem technologies (systems administration of Unix/Linux/Windows, AWS PaaS databases, database activity monitoring, DSPM tools)
• 5+ years of experience in development, infrastructure, or cybersecurity
• Understanding of applicable risk management frameworks from NIST and Data Security Maturity Model
• Experience with CICD pipelines to automate application and infrastructure code deployments
• Experience with workload orchestration platforms such as Kubernetes
• Understanding of a wide-range of cybersecurity capabilities including data security, security engineering, identity and access management, incident response, logging and monitoring, and penetration testing
• Relevant certifications from GIAC, ISC(2), ISACA, and other recognized cybersecurity industry organizations.

Benefits

• Health insurance
• 401(k) matching
• Flexible work hours
• Paid time off
• Opportunities for professional development