below marketmost similar roles pay hereabove market
This role pays more than
54%
of similar roles. Most pay
$131,476–$208,800
— the blue band above.
At the midpoint, this role pays about
$176k
versus about
$170k
for comparable roles.
Based on 240 similar postings.
Employer
About CME Group
CME Group operates the world''s largest financial derivatives marketplace, offering futures and options products across interest rates, equity indexes, foreign exchange, energy, agricultural products, and metals. Industry: Financial Exchanges & Derivatives
CME Group currently has
13 open roles
on FindRole.
Listed pay typically runs
$125,800–$209,600
across 11 roles with salary data.
The Lead Security Engineer - DevSecOps joins the Global Information Security group to drive software security design and secure SDLC techniques. This role involves developing secure reference designs, contributing to software products, and mentoring team members. Key responsibilities include conducting unit, integration, and system testing, performing code reviews, and creating technical documentation like data flow diagrams. The position requires expertise in cryptography, authentication, and secure data handling within microservices and Cloud Native architectures. Candidates must utilize tools such as Jenkins, Maven, Git, Ansible, Terraform, and Docker. Proficiency in Java, Python, JavaScript, and Bash is required to automate AWS services. The role solves complex security problems by establishing enterprise-wide standards for secure coding, infrastructure-as-code, and immutable deployment principles across diverse engineering divisions.
Design and implement secure software reference designs, delivery systems, and enterprise-wide solutions.
Execute all stages of the Secure SDLC process to mature security practices across the organization.
Conduct unit, integration, and system testing for all produced code and projects.
Write test-driven code and scripts using primary programming languages with minimal guidance.
Develop technical documentation including use cases, design specifications, data flow diagrams, and sequence diagrams.
Review code to proactively identify, troubleshoot, and mitigate potential security defects.
Manage infrastructure as code and automate provisioning for cloud services using DevSecOps tools.
Provide input on code reviews, environment build deployments, and release notes.
What we're looking for
Bachelor's or Master's degree in Computer Science, Information Systems, or a related field, or equivalent work experience.
8+ years of application development and/or infrastructure engineering experience.
2+ years of active hands-on experience with application deployments in the Cloud (AWS, GCP, Azure).
Experience using DevSecOps tools for managing infrastructure as code such as CloudFormation, Terraform, Chef, Puppet, or Ansible.
Proficiency in programming languages including Java, Python, JavaScript (Node.js), and potentially .NET (C#, C++).
Experience with container systems like Docker and Kubernetes, and automation tools like Jenkins, Maven, Git, and Bash.
Knowledge of secure SDLC disciplines including cryptography, authentication, authorization, and secure data handling.
Technical understanding of security frameworks (CIS, NIST 800, PCI, HIPAA) and technologies (IDS/IPS, WAF) is preferred; specific certifications are preferred.
Infrastructure as Code
CI/CD
Terraform
Ansible
Kubernetes
Docker
Python
Go
Rust
Linux
Red Hat Enterprise Linux
GitOps
Policy as Code
AWS
Azure
GCP
Software Defined Networking
Identity and Access Management
Zero-Trust Architecture