2 days ago
Base Salary
$132k - $220k/yr
Responsibilities
- Design and implement secure software reference designs, delivery systems, and enterprise-wide solutions.
- Contribute to software products across the Secure SDLC, including secure coding, testing, code review, deployment, documentation, and defect troubleshooting.
- Develop secure design patterns and architectures involving cryptography, authentication, authorization, data handling, auditing, and input validation.
- Automate cloud service provisioning and configuration using code, scripts, infrastructure-as-code, and DevSecOps tools.
- Perform unit, integration, and system testing and write unit tests for implementations.
- Review code, identify optimization opportunities and security defects, and support environment builds, releases, and deployment processes.
- Create technical documentation including requirements, design specifications, process flows, data flow diagrams, sequence diagrams, and communications diagrams.
- Collaborate across divisions and geographic locations to establish secure SDLC practices and applied reference architectures.
- Mentor team members, contribute to security strategy and roadmap planning, and serve as a security liaison to external groups.
Requirements
- Bachelor’s or master’s degree in Computer Science, Information Systems, or a related field, or equivalent work experience.
- 8+ years of application development and/or infrastructure engineering experience.
- 2+ years of hands-on experience deploying applications in AWS, GCP, or Azure cloud environments.
- Experience with infrastructure-as-code and DevSecOps tools such as CloudFormation, Terraform, Chef, Puppet, and Ansible.
- Experience with Jenkins, Maven, Git, Ansible, Docker, and Kubernetes.
- Experience automating AWS provisioning and configuration using AWS CLI or API, Jenkins, Python, Bash, and Git.
- Strong experience with Java, Python, JavaScript and Node.js, with possible experience in .NET, C#, and C++.
- Experience with logging and monitoring tools such as CloudWatch and Splunk, and ticketing systems such as Jira.
- Experience designing, implementing, and supporting larger-scale software products and modern Cloud Native architectures.
- Strong understanding of secure SDLC disciplines, software architectures, CI/CD pipelines, infrastructure as code, and secure design patterns.
- Excellent oral and written communication skills and ability to work across teams and geographic locations.
- Familiarity with CIS, NIST 800, PCI, HIPAA, IDS/IPS, WAF, Atlassian Jira SDK, UX/UI design, wireframing, and client-side visualization libraries such as D3.js is desirable.
- Certifications such as CISSP, CSSLP, GSSP-*, CASE, CERT Secure Coding, or PECB Lead Secure Application Developer are desirable.
Benefits
- Competitive salary and comprehensive benefits package.
- Annual target bonus opportunity and broad-based equity program.
- Health coverage, a 401(k), an active pension plan, education reimbursement, paid time off, and a mental health benefit.
- Supportive, inclusive environment with career progression, continuous learning, and exposure to diverse products and cross-functional teams.
Tech Stack
AnsibleAWSAzureBashC#C++ChefD3.jsDockerGitGoogle Cloud PlatformJavaJavaScriptJenkinsKubernetesMaven.NETNode.jsPuppetPythonSplunkTerraform
Categories
About CME Group
CME Group operates global derivatives exchanges and a central counterparty clearinghouse, offering futures and options across interest rates, equities, FX, energy, agriculture, and metals via CME Globex and CME Clearing. It serves banks, asset managers, corporations, and professional traders with trading, market data, and risk management tools, earning fees from transactions, clearing, and data services. A public company headquartered in Chicago, it owns the CME, CBOT, NYMEX, and COMEX marketplaces.