Job Description

NeoXam is a leading financial software company, delivering solutions and services for 175+ customers in 25 countries worldwide.

NeoXam is committed to its clients’ success: we deliver reliable and scalable solutions, processing more than €25 trillion worth of assets per day and serving over 10,000 users.

Through its combined talents and transparent approach, NeoXam helps buy- and sell-side players address the continuous changes in the financial market industry, to grow and better serve their clients.

NeoXam relies on 800+ staff, is headquartered in Paris and has 20 offices across the globe.



NeoXam (NeoXam Company Profile) is a leading financial software company delivering cutting-edge solutions for data management, portfolio management, and regulatory compliance. With a strong global presence, NeoXam serves over 150 customers in 25 countries, processing more than €25 trillion worth of assets daily and supporting over 10,000 users.

Committed to client success, NeoXam provides reliable and scalable solutions that help buy- and sell-side players navigate the evolving financial landscape. Backed by 800+ employees, NeoXam is headquartered in Paris with 20 offices worldwide.

Job Overview

We are seeking a seasoned DevSecOps-Cloud Security Engineer with 6–8 years of hands-on experience in implementing security best practices across DevOps workflows. The ideal candidate will have deep expertise in ISO 27001:2022, SOC 2 Type II audits, and cloud-native security tools. You will play a critical role in integrating security into CI/CD pipelines, managing identity and access, and driving compliance across infrastructure and applications.

Key Responsibilities



  • Manage and integrate authentication mechanisms including Okta, AWS Cognito, OIDC Connect, and OAuth 2.0


  • Oversee security patching within release management cycles to ensure regulatory compliance


  • Automate security workflows using AWS Security Hub, Inspector, Patch Manager, and EventBridge


  • Use Terraform for Infrastructure as Code (IaC) to manage cloud resources securely and efficiently


  • AWS key management, AWS secret management


  • Cryptography


  • Build and maintain automated vulnerability mitigation tasks using AWS CodeBuild


  • Lead and support ISO 27001:2022 and SOC 2 Type II compliance initiatives, representing DevOps and IT in audits and assessments


  • Conduct monthly internal audits for User Access Management, ensuring adherence to least privilege principles and security policies


  • Design and maintain Enterprise Risk Matrices aligned with NIST, ISO, and CIS frameworks


  • Develop and implement incident response policies and procedures to enhance organizational security posture


  • Create detailed audit reports with actionable insights to support continuous improvement


  • Collaborate with cross-functional teams to translate complex security concepts into practical solutions for technical and non-technical stakeholders

Required Skills & Qualifications



  • 6–8 years of experience in DevSecOps, Cloud Security, or IT Compliance


  • Experience with identity and access management platforms (Okta, Cognito, etc.)


  • Excellent communication and documentation skills


  • Ability to work independently and lead security initiatives across teams


  • Strong understanding of ISO 27001, SOC 2, NIST, and CIS frameworks


  • Hands-on experience with AWS services, especially security tools


  • Proficiency in Terraform, CI/CD pipelines, and DevOps automation

Preferred Qualifications



  • AWS Security Specialty,


  • Certified DevSecOps Professional


  • Experience with container security, Kubernetes, or SAST/DAST tools. 

  • Familiarity with SIEM platforms and security orchestration

Apply for this Position

Ready to join ? Click the button below to submit your application.

Submit Application