{"id":2041810,"url":"https://alion.io/job/stepstone-group-devsecops-engineer","title":"DevSecOps Engineer","company":{"id":684981,"name":"StepStone Group","domain":"stepstonegroup.com","url":"https://alion.io/company/stepstonegroup","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Dublin, Ireland"],"countries":["IE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":52000,"max_usd":126000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":629},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"GCP","optional":false},{"name":"Google GKE","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Wiz","optional":false},{"name":"ISO 27001","optional":true}],"status":"live","first_seen_at":"2026-10-07T16:56:51Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-13T23:52:39Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"We are global private markets specialists delivering tailored investment solutions, advisory services, and impactful, data driven insights to the world’s investors. Leveraging the power of our platform and our peerless intelligence across sectors, strategies, and geographies, we help identify the advantages and the answers our clients need to succeed.\nThe DevSecOps Engineer is responsible for embedding security into the software development lifecycle and the firm's CI/CD pipelines, with primary focus on application security guardrails, developer-facing tooling, and secure engineering practices. The role also maintains hands-on cloud security expertise, primarily on AWS with working proficiency across Azure, to harden posture and reduce exposure. Sitting within Infrastructure Engineering, the role partners closely with application development, platform, and DevOps teams to build guardrails that get adopted rather than imposed, protecting systems and data while supporting delivery speed.\n Key Responsibilities\nOwn and continuously mature the firm's DevSecOps program, embedding SAST, DAST, SCA, infrastructure-as-code and secrets scanning, and policy gates directly into CI/CD pipelines to catch issues before deployment.\nPartner with application development teams to threat-model new services and features at design time, translating findings into concrete guardrails and remediation guidance developers can act on.\nBuild and maintain secure-by-default patterns, reusable infrastructure-as-code modules, and golden pipeline templates that engineering teams adopt by default.\nOperationalize the firm's cloud-native application protection platform (Wiz): triage, prioritize, and remediate findings across cloud and application layers, reducing backlog and mean time to remediate.\nEstablish and codify cloud security guardrails primarily on AWS, including Service Control Policies, Config rules, public-access blocking, default encryption, and tagging baselines.\nHarden identity and access (IAM roles, policies, permission boundaries, and least privilege) and network exposure across cloud workloads.\nExtend posture management and guardrails to Azure, using tools such as Microsoft Defender for Cloud, Azure Policy, Entra ID, and equivalent GCP controls.\nDrive down internet-facing exposure, targeting zero critical and high-severity findings across public-facing workloads and applications.\nProvide security evidence and controls in support of SOC 2, audit, and regulatory requirements, with emphasis on evidencing secure SDLC practices.\nRequired Skills\nStrong, hands-on experience embedding security into CI/CD pipelines and the SDLC: SAST, DAST, SCA, infrastructure-as-code scanning, secrets management, and policy-as-code/gating.\nPractical application security background, including threat modeling and secure coding guidance, with a track record of working directly with developers to land fixes without becoming a blocker to delivery.\nSolid, hands-on AWS security expertise (IAM, VPC and network security, KMS and encryption, Service Control Policies, public-exposure controls), plus working proficiency in Azure and/or GCP security (Entra ID, Azure RBAC, Microsoft Defender for Cloud, Azure Policy, or equivalent GCP services).\nProficiency with infrastructure-as-code (Terraform and/or CloudFormation; Bicep or GCP Deployment Manager an advantage) and scripting and automation (Python preferred).\nSolid understanding of core security processes, including vulnerability management, logging and detection, secrets management, and incident support.\nExperience operating a CNAPP/CSPM platform (Wiz preferred), with a track record of remediating findings rather than only reporting them.\nFamiliarity with container and Kubernetes security (EKS/AKS/GKE) and AI/ML application security is desirable.\n Educations and Or Work Experience Requirements\nBachelor's degree in Computer Science, Information Security, or a related field.\nFour (4)+ years of experience in DevSecOps, application security, or cloud security engineering.\nProfessional certifications such as a DevSecOps or application security credential (e.g., GWEB, Certified DevSecOps Professional), AWS Certified Security - Specialty, or equivalent.\nPrior exposure to audit and compliance standards including SOC 2, ISO 27001, or SOX.\nAt StepStone, we believe that our people are our most important asset and crucial to our success. We are an Equal Opportunity Employer that strives to create an environment that empowers our employees and allows them to be heard, regardless of title or tenure. Our organizational community features multiple Employment Resource Groups as well as mentorship programs to enhance the employee experience for all. \nAs an Equal Opportunity Employer, StepStone does not discriminate on the basis of race, creed, color, religion, sex, national origin, citizenship status, age, disability, marital status, sexual orientation, gender identity, gender expression, genetic information or any other characteristic protected by law.\nCandidates must be at least 18 years old to apply.\nDeveloping People at StepStone","description_format":"text","description_chars":5105,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Asset Management & Funds","Private Equity"],"lifecycle":[{"event":"open","at":"2026-10-07T18:07:07Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":5,"expected_fill_days":90,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/stepstone-group-devsecops-engineer","json_url":"https://alion.io/job/stepstone-group-devsecops-engineer.json","meta":{"generated_at":"2026-10-14T03:08:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4884,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":684981},"rest":"https://alion.io/mcp/rest/get_company?id=684981"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstepstone-group-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstepstone-group-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstepstone-group-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/stepstone-group-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstepstone-group-devsecops-engineer"}]}