Senior Cloud Security Engineer
A leading fintech company is seeking a Senior Cloud Security Engineer to play a key part in the firm's large-scale cloud transformation initiative. This senior engineer will be a technical leader responsible for designing, implementing, and automating security as an essential component of their infrastructure and application development processes.
Primary Responsibilities:
- Design and implement scalable security architectures for cloud-native applications and workloads across AWS (primary), Azure, and GCP.
- Write and maintain Infrastructure-as-Code (IaC) templates in Terraform to enforce security policies, automate guardrails, and manage cloud infrastructure securely.
- Develop security automation scripts and integrations using Python.
- Define and manage IAM policies, role-based access controls (RBAC), and service identities, and embrace least privilege access principles across cloud environments.
- Work closely with development and production teams to embed security scanning, policy enforcement, and vulnerability management into CI/CD pipelines.
- Secure Kubernetes clusters (EKS, AKS, GKE) by implementing workload identity, network policies, and runtime security controls.
- Evaluate and implement cloud-native security solutions, such as AWS Security Hub, GuardDuty, Macie, Azure Security Center, and Chronicle Security Operations.
- Monitor cloud environments for threats and misconfigurations, integrating logs and alerts into SIEM and SOAR platforms to enhance detection and response.
- Conduct architecture reviews, red team assessments, and CSPM initiatives to identify risks and recommend remediations.
- Stay ahead of evolving cloud security threats, researching and applying emerging best practices in Zero Trust, confidential computing, and API security.
Essential Qualifications:
- 7+ years of experience in cloud security engineering, with deep expertise in AWS and exposure to Azure and GCP.
- Bachelor's degree in Computer Science or a related technical discipline.
- Strong proficiency in Terraform for cloud security automation and governance.
- Experience with Python for automation, security tooling, and API integrations.
- Knowledge of Zero Trust Architecture (ZTA) and identity-centric security models.
- Hands-on experience securing Kubernetes, containers, and serverless workloads.
- Familiarity with threat modeling, security risk assessments, and incident response in cloud environments.
- Ability to collaborate with engineers, architects, and security teams to balance security and operational needs.
Preferred Qualifications:
- Certifications such as AWS Certified Security - Specialty, CISSP, CKA/CKS, or Azure Security Engineer Associate.
- Experience securing API gateways, cloud-native cryptography (AWS KMS, HashiCorp Vault), and workload isolation strategies.
- Background in financial services or other regulated industries.
This is a hybrid role requiring onsite presence Tuesday through Thursday. Interested candidates must be located in (or willing to relocate to) the Bay Area.
FAQs
Congratulations, we understand that taking the time to apply is a big step. When you apply, your details go directly to the consultant who is sourcing talent. Due to demand, we may not get back to all applicants that have applied. However, we always keep your resume and details on file so when we see similar roles or see skillsets that drive growth in organizations, we will always reach out to discuss opportunities.
Yes. Even if this role isn’t a perfect match, applying allows us to understand your expertise and ambitions, ensuring you're on our radar for the right opportunity when it arises.
We also work in several ways, firstly we advertise our roles available on our site, however, often due to confidentiality we may not post all. We also work with clients who are more focused on skills and understanding what is required to future-proof their business.
That's why we recommend registering your resume so you can be considered for roles that have yet to be created.
Yes, we help with resume and interview preparation. From customized support on how to optimize your resume to interview preparation and compensation negotiations, we advocate for you throughout your next career move.