Cloud Security Engineer - Data Protection & Infrastructure Security - Boston

Job Description

A global investment management organization is seeking a Cloud Security Engineer to help protect the infrastructure, data platforms, and cloud services that support institutional investors around the world. The firm is known for its leadership in index investing, ETF products, and large-scale asset management, with a significant focus on technology, analytics, and digital transformation initiatives throughout the organization.

As a Cloud Security Engineer, you will focus on securing cloud-hosted data ecosystems, safeguarding sensitive financial information, and implementing infrastructure security controls across a highly distributed environment. This role is ideal for an engineer who enjoys solving complex problems related to data security, cloud infrastructure hardening, and security automation. You will partner with teams responsible for cloud operations, enterprise data platforms, analytics environments, and infrastructure engineering to ensure security is built into the foundation of critical systems.

This position differs from traditional cloud security roles by emphasizing platform hardening, data security, infrastructure resilience, and control validation. You will assess cloud environments for security weaknesses, develop automated remediation solutions, improve security visibility, and help establish technical controls that protect confidential client and investment data. You will also work with internal stakeholders to strengthen secure configurations, reduce attack surfaces, and continuously improve the organization's cloud security maturity.

Required Skills & Experience

• Strong experience with AWS, Azure, or multi-cloud security
• Experience securing cloud infrastructure and core platform services
• Knowledge of cloud configuration management and hardening standards
• Experience with cloud security posture management (CSPM) tools
• Understanding of encryption technologies and key management systems
• Experience with vulnerability scanning and remediation programs
• Knowledge of networking fundamentals, DNS, VPNs, and firewalls
• Experience with Infrastructure as Code tools such as Terraform
• Proficiency with Python, PowerShell, or Bash scripting
• Experience implementing security controls for enterprise data environments

Desired Skills & Experience

• 8+ years of cloud security or infrastructure security experience
• Experience working in financial services or other regulated industries
• Familiarity with data loss prevention (DLP) technologies
• Experience securing cloud-based analytics or data lake environments
• Knowledge of cloud compliance frameworks and regulatory requirements
• Experience supporting large enterprise infrastructure environments
• AWS Security Specialty, Azure Security Engineer, CISSP, or similar certifications
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field

What You Will Be Doing

Daily Responsibilities

• 100% Hands On
• Harden and secure cloud infrastructure using security best practices and baseline standards
• Develop automated solutions that identify and remediate cloud configuration risks
• Implement controls that protect sensitive financial, operational, and client data
• Perform security assessments of cloud resources and enterprise platforms
• Partner with engineering teams to strengthen infrastructure security across cloud environments
• Support encryption, key management, and data protection initiatives
• Monitor cloud environments for risky configurations and compliance gaps
• Build automation scripts that improve operational efficiency and security visibility
• Manage security findings from cloud assessments and coordinate remediation activities
• Create technical documentation, security standards, and implementation procedures

The Offer

• Bonus OR Commission eligible

You will receive the following benefits

• Medical Insurance
• Dental Benefits
• Vision Benefits
• Paid Time Off (PTO)
• 401(k) (including match, if applicable)

Applicants must be currently authorized to work in the US on a full-time basis now and in the future.