Information Security Engineer (DevSecOps)

Job Description

It's an exciting time to be a member of the Fisher Investments Technology Department. We're investing in the future of our firm's technology and are building our team to achieve global growth. We are looking for a Information Security Engineer (DevSecOps) to support our Corporate Systems team. If you are looking for an opportunity to make a difference as we develop scalable and strategic solutions to support our global growth, we want to hear from you!

The Opportunity :

Fisher Investments is growing internationally, and we are looking for an Information Security Engineer (DevSecOps) to join a team that drives future global growth and scale through strategic solutions and continuous innovation. You will help support our firm's diverse departments by building relationships with stakeholders, while consulting and managing a full range of CICD pipeline cyber security controls with technology teams at an Enterprise level. You will contribute to projects that require Information Security DevSecOps experience in application development, release management, and infrastructure as code environments . You will report to the Applications Development Team Lead.

The Day-to-Day :

• Develop and manage the configuration, maintenance, and operations of DevSecOps related security services including GitHub Advanced Security and Terraform
• Frequent interaction with all Information Security Teams, Technology, Project, and Governance teams to assist and implement Secure CICD pipeline practices, controls, and vulnerability response
• Use analytical, and technical knowledge, to assess and propose cyber security risk remedies related to DevSecOps
• Participate actively in development of secure coding standards, principles, architecture and standards, leveraging experience in NIST, CIS, ISO, and other international standards
• Identify areas for improvement proactively and support the DevSecOps effort in standardizing processes
• Contribute to the success of the Information Security DevSecOps program within the firm by supporting the various teams and customers in the implementation of good security practices
• Analyze security controls and make recommendations for changes or improvements
• Develop and manage initiative level artifacts, including architectural diagrams, implementation planning

Your Qualifications :

DevSecOps CICD Pipeline Development & Management

Best Practices for Secure Coding in C#, Java, Python

Compensation :

Why Fisher Investments :

We work for a bigger purpose : bettering the investment universe. We take great pride in our inclusive culture, our learning and development framework customized for every employee, and our Great Place to Work Certification. It's the people that make the Fisher purpose possible, and we invest in them by offering exceptional benefits like :

FISHER INVESTMENTS IS AN EQUAL OPPORTUNITY EMPLOYER