The Role
Embed security across the SDLC by designing and maintaining CI/CD security controls, integrating SAST/SCA/DAST, securing AWS and container platforms, implementing IaC, managing vulnerabilities and incident response, supporting compliance (PCI-DSS, SOC2, NIST), mentoring teams, and developing security metrics.
Summary Generated by Built In
SWBC is seeking a talented DevSecOps Security Engineer to leverage modern security practices and tools to enhance the security, integrity, and reliability of cloud and on-premise applications. This role partners with DevOps, engineering, and security teams to embed security across the software development lifecycle and ensure secure, compliant, and resilient application delivery.
Why you'll love this role:
You’ll have the opportunity to embed security at the core of modern cloud and DevOps environments, influencing how secure systems are designed, built, and released at scale. This role offers hands‑on ownership of cutting‑edge DevSecOps tooling while partnering closely with engineering teams in a highly regulated, security‑focused organization. If you enjoy automation, cloud security, and making a real impact across the SDLC, this role provides both challenge and growth.
Essential duties include the following:
- Design, implement, and maintain security controls within GitHub and Azure DevOps-based CI/CD pipelines.
- Integrate security tools (SAST, SCA, DAST, container and secrets scanning) into pipelines.
- Develop automation scripts for secure deployments, monitoring, and operational efficiency.
- Secure AWS environments including services such as EC2, S3, Lambda, IAM, GuardDuty, Inspector, and CloudWatch.
- Implement IAM, OIDC, secrets management, and KMS-based encryption controls.
- Design and maintain Infrastructure-as-Code solutions using Terraform, CloudFormation, or AWS CDK.
- Secure containerized environments using Docker and Kubernetes, including cluster hardening and policy enforcement.
- Improve container security through image scanning, signing, and registry controls.
- Implement logging, monitoring, alerting, and observability solutions for cloud workloads.
- Monitor systems for threats, indicators of compromise, and compliance gaps.
- Perform vulnerability management, tracking, and remediation.
- Participate in incident response, investigation, and recovery activities.
- Support audit and compliance requirements (PCI-DSS, SOC2, NIST) and coordinate with GRC teams.
- Review code, infrastructure changes, and releases for security risks.
- Collaborate with DevOps and engineering teams to enforce secure SDLC practices.
- Provide technical guidance on security architecture and best practices.
- Mentor team members and promote a culture of security, automation, and continuous improvement.
- Develop and track security metrics, KPIs, and pipeline telemetry.
Serious candidates will possess the minimum qualifications:
- Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent practical experience.
- Minimum five (5) years of experience in DevSecOps, Cloud Security, Security Engineering.
- Hands-on experience with GitHub / GitHub Actions or similar CI/CD tools.
- Strong expertise in AWS cloud services and security controls.
- Experience with Infrastructure-as-Code tools (Terraform preferred).
- Strong understanding of CI/CD pipeline design, automation, and security integration.
- Experience with containers and orchestration (Docker, Kubernetes, ECS).
- Knowledge of IAM, OIDC, secrets management, and key management (KMS).
- Strong understanding of Git workflows, branching strategies, and pull request processes.
- Knowledge of OWASP Top 10 and application security principles.
- Proficiency in scripting languages such as Python, Bash, or Go.
- Experience with security tools such as Mend, SonarQube, Prowler, Trivy, OWASP ZAP, or Burp Suite.
- Experience with SIEM/SOAR platforms and security automation is a plus.
- AWS Certified Developer – Associate is required at time of hire.
- AWS Certified DevOps Engineer – Professional is required and must be obtained within 6 months of hire.
- AWS Certified Security – Specialty is highly desired and must be obtained within 6 months of hire.
- AWS Certified SysOps Administrator – Associate, or AWS Certified Solutions Architect – Associate are highly desired.
- Security certifications (CISSP, CCSP, GIAC) are highly desired.
- Experience in financial or regulated environments.
- Exposure to offensive security practices, AI/ML security risks.
SWBC offers*:
- Competitive overall compensation package
- Work/Life balance
- Employee engagement activities and recognition awards
- Years of Service awards
- Career enhancement and growth opportunities
- Leadership Academy and Mentor Program
- Continuing education and career certifications
- Variety of healthcare coverage options
- Traditional and Roth 401(k) retirement plans
- Lucrative Wellness Program
*Based upon employee eligibility
Additional Information:
SWBC is a Substance-Free Workplace and requires pre-employment drug testing.
Please note, SWBC does not hire tobacco users as allowed by law.
To learn more about SWBC, visit our website at www.SWBC.com. If interested, please click the appropriate apply button.
Skills Required
- Bachelor's degree in Computer Science, Information Security, or related field, or equivalent practical experience
- Minimum five (5) years of experience in DevSecOps, Cloud Security, or Security Engineering
- Hands-on experience with GitHub / GitHub Actions or similar CI/CD tools (Azure DevOps)
- Strong expertise in AWS cloud services and security controls (EC2, S3, Lambda, IAM, GuardDuty, Inspector, CloudWatch)
- Experience with Infrastructure-as-Code tools (Terraform, CloudFormation, or AWS CDK)
- Terraform experience (preferred)
- Strong understanding of CI/CD pipeline design, automation, and security integration
- Experience with containers and orchestration (Docker, Kubernetes, ECS)
- Knowledge of IAM, OIDC, secrets management, and key management (KMS)
- Strong understanding of Git workflows, branching strategies, and pull request processes
- Knowledge of OWASP Top 10 and application security principles
- Proficiency in scripting languages such as Python, Bash, or Go
- Experience with security tools such as Mend, SonarQube, Prowler, Trivy, OWASP ZAP, or Burp Suite
- Experience with SIEM/SOAR platforms and security automation
- AWS Certified Developer - Associate (required at time of hire)
- AWS Certified DevOps Engineer - Professional (required; obtain within 6 months of hire)
- AWS Certified Security - Specialty (highly desired; obtain within 6 months of hire)
- AWS Certified SysOps Administrator - Associate or AWS Certified Solutions Architect - Associate (highly desired)
- Security certifications such as CISSP, CCSP, or GIAC (highly desired)
- Experience in financial or regulated environments
- Exposure to offensive security practices and AI/ML security risks
- Pass pre-employment drug testing
- Non-tobacco user as required by company policy
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Since 1976, SWBC has been providing a wide range of insurance, mortgage, and investment services to financial institutions, individuals, and businesses. Company Overview Headquartered in San Antonio, SWBC is a diversified financial services company providing a wide range of insurance, mortgage, and investment services to financial institutions, businesses, and individuals. With offices across the country, SWBC is committed to providing quality products, outstanding service, and customized solutions in all 50 states.
