Lead Cloud Security Engineer - Boston/Cloud Security/AWS/Azure

Job Description

A leading global investment management firm is hiring a Senior Cloud Security Engineer to join its cybersecurity team. The organization manages investment strategies across public and private markets for a global institutional client base and relies heavily on advanced technology, data platforms, and research systems to support investment decision-making. This role will focus on protecting cloud-based environments that power critical business functions, including investment research, portfolio analytics, enterprise applications, and global collaboration platforms.

As a Senior Cloud Security Engineer, you will serve as a technical expert responsible for strengthening cloud resilience, improving threat detection capabilities, and safeguarding sensitive financial and investment data. You will work closely with security operations, infrastructure, data engineering, and application development teams to develop proactive security solutions that reduce risk and improve visibility across cloud environments.

Unlike traditional cloud security roles that focus primarily on governance or DevSecOps, this position is heavily centered around cloud defense, detection engineering, security tooling, and incident preparedness. You will build and optimize automated detection capabilities, improve cloud telemetry and monitoring, investigate security events, and develop security engineering solutions that enhance the organization's ability to identify and respond to emerging threats. This is an excellent opportunity for an engineer who enjoys hands-on technical work and wants to help secure a highly sophisticated, data-driven technology environment.

Required Skills & Experience

• Strong experience securing AWS and Azure environments
• Experience with cloud-native security monitoring and logging solutions
• Knowledge of detection engineering and threat hunting methodologies
• Experience with SIEM platforms such as Splunk, Sentinel, or similar tools
• Understanding of IAM, RBAC, and cloud access controls
• Experience with infrastructure automation and scripting using Python, PowerShell, or Bash
• Knowledge of cloud networking and security controls
• Experience managing cloud vulnerabilities and remediation programs
• Familiarity with EDR, XDR, and cloud workload protection platforms
• Strong troubleshooting and incident investigation skills

Desired Skills & Experience

• 5+ years of cybersecurity or cloud security engineering experience
• Experience supporting global enterprise environments
• Financial services or investment management experience
• Experience with MITRE ATT&CK and threat modeling frameworks
• Knowledge of Kubernetes and container security
• Experience building security dashboards and operational metrics
• AWS Security Specialty, CISSP, GCIA, GCIH, or related certifications
• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field

What You Will Be Doing

Daily Responsibilities

• 100% Hands On
• Develop and maintain cloud threat detection rules and monitoring capabilities
• Investigate cloud-based security incidents and support response efforts
• Engineer automated solutions for identifying malicious activity and unauthorized access
• Improve visibility across cloud infrastructure through logging, telemetry, and analytics
• Partner with infrastructure teams to remediate security findings and reduce risk exposure
• Conduct threat-hunting activities across cloud workloads and services
• Implement security controls that protect sensitive investment and client data
• Evaluate new cloud services and identify potential security risks prior to deployment
• Create security automation workflows that improve operational efficiency
• Build dashboards, reports, and metrics that measure cloud security performance

The Offer

• Bonus OR Commission eligible

You will receive the following benefits

• Medical Insurance
• Dental Benefits
• Vision Benefits
• Paid Time Off (PTO)
• 401(k) (including match, if applicable)

Applicants must be currently authorized to work in the US on a full-time basis now and in the future.