Senior DevSecOps Engineer
About the Job:Northwestern Mutual is looking for enthusiastic technologists who want to grow their career in DevSecOps – Application & Cloud Security. You’re the right fit if you love to solve problems and are always striving to learn new things. We’re looking for self-motivated and self-driven engineers who are passionate about what they do and love cybersecurity. Your knowledge in application security, DevSecOps practices, and cloud technologies will be instrumental in further maturing our application and cloud security posture throughout the Enterprise. In this position, you will work with cross-functional teams across a set of diverse technologies to manage application and cloud security tools with an automation-first mindset. You will work in an agile and innovative environment, solving complex problems and collaborating with architects and engineers to ensure the safety and security of Northwestern Mutual's applications.What You'll Bring to the Role:Passionate about securityA team player who enjoys collaborating with cross-functional teamsA great communicator (written and verbal) with an ability to articulate complex topics in a clear and concise mannerEmploys a flexible and constructive approach when solving problemsProficient with development and scripting languages, Python and JavaScript preferredBachelor's or equivalent experience with an emphasis in computer science, computer engineering, software engineering, MIS related field4+ years' experience with cloud technologies and CICD pipelines (AWS, Gitlab CI, Kubernetes)5+ years' experience in development, infrastructure, or cybersecurityExperience conducting security tests (static and dynamic code analysis, software composition analysis, or penetration tests)Experience with modern DevOps development practicesExperience with CICD pipelines to automate application and infrastructure-as-code deploymentsContinuously looking for opportunities to improve our processes and capabilitiesExperienced working with application and engineering teamsA self-directed individual contributorWhat you'll get to do:Engineer solutions with a focus on automation to reduce manual and repetitive tasksGuide and advise application and engineering teams in the areas of Application and Cloud SecurityOperationally support Application & Cloud Security tools integrated into our software development lifecycle. Examples include SAST, DAST, SCA, CSPM, and infrastructure vulnerability scannersActively monitor, assess and recommend tactical and strategic initiatives based on new and emerging threats posing risk to our companyStay apprised of current and proposed security changes impacting regulatory, privacy and security industry best practicesImplement remediation efforts after security assessment findings outline weaknesses requiring attentionMentor other staff members to ensure consistency, quality and productivity of deliverablesFurther impress us with:Your passion for all things securityYour ability to e...