Lead Security Engineer - DevSecOps

The Lead Security Engineer - DevSecOps at CME Group participates in all functions related to software security design, secure SDLC techniques, and applying strong, secure design patterns with minimal oversight at a task level. This position acts as a constructive, communicative team member and mentor who contributes to software security strategy and roadmap planning, serves as a security liaison to external groups, and develops secure reference designs and products across the Global Information Security (GIS) group and the larger enterprise.

The role requires deep software engineering expertise and prior experience in secure SDLC disciplines (such as strong cryptography, authentication/authorization, secure data handling, auditing, and input validation). Additionally, a strong understanding of modern software architectures—including microservices, Cloud Native designs, and software-defined deployments (CI/CD pipelines, Infrastructure-as-Code, immutable and idempotent declarative principles)—is necessary for success. While not required, a basic technical understanding of security frameworks (CIS, NIST 800, PCI, HIPAA) and exposure to security technologies (IDS/IPS, WAF) is highly desirable.

What You’ll Get

• Enterprise-wide impact by shaping security standards and architectures across multiple engineering divisions.
• A supportive environment fostering career progression, continuous learning, and an inclusive culture.
• Broad exposure to CME's diverse products, asset classes, and cross-functional teams.
• A competitive salary and comprehensive benefits package.

Explore our full range of benefits.

What You'll Do

• Actively drive and contribute to designs of secure software reference designs, delivery systems, and enterprise-wide solutions that demonstrate secure coding principles and practices.
• Take responsibility for primary contributions to the implementation of various software products within the GIS team, inclusive of all aspects of the Secure SDLC process through to maturity.
• Conduct unit, integration, and system testing of any code produced and projects contributed to, utilizing prior background and experience.
• Demonstrate high ...

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam rem aperiam, eaque ipsa quae ab illo inventore veritatis.