Senior Cloud Security & Compliance Engineer
- Work arrangement
- Remote
- Occupation
- Banking & Financial Services
- Location
- US
- Compensation
- Not disclosed
- Apply by
- April 13, 2027
About this role
Accountabilities
CloudSecurityEngineering:AdministerandoptimizetheWizplatformoranequivalentCloud-NativeApplicationProtectionPlatform(CNAPP),improvingcloudsecurityposturethroughscalablepolicies,accuratedetection,andactionablefindings.
PolicyDevelopmentandAutomation:Create,maintain,andrefinecustomsecurityrulesandpoliciesascodeusingframeworkssuchasOPA/Rego,supportedbyPythonscriptingandAPIintegrations.
InfrastructureSecurity:DevelopreusableTerraformmodulesandsecure-by-defaultinfrastructurepatternsthatembedsecuritycontrolsintocloudenvironments.
Multi-CloudProtection:ImplementandscalesecuritycapabilitiesacrossAWS,Azure,andGoogleCloudPlatform(GCP),adaptingcontrolstoeachplatform'sarchitectureandrequirements.
RiskAssessmentandRemediation:Evaluatesecurityfindingsbasedonexploitability,potentialimpact,andblastradius;prioritizeremediationeffortsandreducefalsepositivestoimprovedetectionquality.
ComplianceandContinuousMonitoring:SupportFedRAMPandotherregulatedcloudenvironmentsbyautomatingsecuritycontrols,mappingrequirementstotechnicalguardrails,andmaintainingcontinuousmonitoringcapabilities.
EngineeringEnablement:Helpengineeringteamsresolvevulnerabilitiesandconfigurationrisksefficientlythroughautomation,clearremediationguidance,andsecureinfrastructurepatterns.
SecurityIntegrationandCollaboration:IntegratesecuritycontrolsintodevelopmentworkflowsandCI/CDpipelines,collaboratewithcross-functionalteams,andcontributetotechnicaldiscussionsandknowledgesharing.
ProfessionalExperience:Atleastfiveyearsofhands-oncloudsecurityengineeringexperience,includingproduction-levelimplementationandmaintenanceofcloudsecuritycontrols.
CloudSecurityPlatforms:ExperienceadministeringWizoracomparableCNAPPsolution,suchasPrismaCloud,Orca,MicrosoftDefenderforCloud,orLacework,withtheabilitytoadaptquicklytonewplatforms.
ProgrammingandAutomation:ProficiencyinPythonforscripting,securityautomation,andAPIintegrations,withexperienceusingtoolssuchastheWizGraphQLAPI,AWSboto3,orequivalenttechnologies.
Multi-CloudExpertise:DeepknowledgeofAWSandstrongpracticalexperiencewitheitherAzureorGCP,alongsideworkingknowledgeofallthreemajorcloudplatforms.
InfrastructureasCode:Hands-onexperiencewithTerraformandHCL,particularlydevelopingreusablemodulesthatenforcesecure-by-defaultconfigurations.
PolicyasCode:ExperiencewithOPA/Regooranequivalentpolicy-as-codeframeworkfordefining,implementing,andmaintainingautomatedsecurityguardrails.
SecurityAnalysis:Stronganalyticalandtroubleshootingskills,withtheabilitytoevaluatevulnerabilities,assessexploitability,prioritizerisk,anddistinguishgenuinethreatsfromfalsepositives.
U.S.Citizenship:U.S.citizenshipisrequiredtosupporttheapplicableregulatoryrequirementsassociatedwithFedRAMPenvironments.
RegulatoryKnowledge:FamiliaritywithNISTSP800-53,FedRAMP,GovCloud,orImpactLevelenvironmentsispreferred,particularlyexperiencetranslatingcompliancerequirementsintotechnicalcontrols.
AdditionalTechnicalSkills:ExperiencewithKubernetesmanifests,containersecurity,CI/CDplatformssuchasGitHubActions,GitLab,orJenkins,andauditsupportorcontinuousmonitoringisanadvantage.
LeadershipandCommunication:Abilitytocommunicatetechnicalconceptsclearly,collaborateeffectivelywithengineeringteams,mentorcolleagues,andleadtechnicaldiscussions.
Certifications:Relevantcredentialsarebeneficial,includingAWSCertifiedSecurity–Specialty,MicrosoftCertified:AzureSecurityEngineerAssociate(AZ-500),GoogleProfessionalCloudSecurityEngineer,orCertifiedCloudSecurityProfessional(CCSP).
CompetitiveSalary:Annualbasesalaryrangingfrom$120,000to$170,000,dependingonqualifications,experience,location,andotherrelevantfactors.
RemoteWork:RemotepositionwithintheUnitedStates.
TechnicalImpact:Opportunitytoworkonadvancedcloudsecuritysolutionssupportingenterpriseandgovernmentenvironments.
ProfessionalDevelopment:Exposuretomoderncloudsecurityplatforms,automationframeworks,infrastructure-as-codepractices,andregulatorycomplianceinitiatives.
InclusiveWorkplace:Commitmenttodiversityandequalopportunity,welcomingprofessionalsfromawiderangeofbackgroundsandexperiences.