Why this role stands out
This hybrid role offers a unique opportunity to shape the future of AI security within a reputable financial institution, allowing you to develop cutting-edge skills and make a significant impact. If you're a seasoned security engineer with a passion for cloud and application security, you'll thrive in this collaborative environment as you build secure AI solutions. Apply today to join a forward-thinking team and advance your career in a critical and evolving field.
Quick overview
Job description
At Cetera, our Information Security organization protects employees, advisors, and clients from evolving cyber threats across cloud, SaaS, and enterprise IT environments. As cloud adoption continues to expand across the enterprise, Cetera is investing in secure cloud architecture, governance, and risk mitigation to ensure innovation aligns with regulatory and security expectations.
We are seeking a skilled security engineer with a strong cloud and application security background to lead and support the secure design, deployment, and governance of cloud-based systems. This role will serve as a key bridge across IT Risk, Cloud Security, Cloud Engineering, and Application Development teams, ensuring cloud services are implemented securely within a regulated financial environment.
What will you do:
- Identify, assess, and mitigate security risks associated with cloud systems and services
- Implement controls aligned to OWASP guidance for cloud-native applications and NIST frameworks
- Perform threat modeling for cloud-enabled applications
- Propose and validate technical guardrails to prevent unauthorized cloud access and support secure cloud development
- Identify and assess risk from unsanctioned cloud tool usage across the enterprise
- Evaluate third-party cloud tools for risk and compliance
- Design and secure cloud-based workloads
- Integrate security into CI/CD pipelines
- Partner with IT Risk, Cloud Security, and Engineering teams
- Support incident response for cloud-related threats
- Develop security standards, runbooks, and architecture documentation
- Support audits and regulatory compliance activities
What you will have:
- 3+ years of experience in cloud security, application security, or a combination of both
- Hands-on experience securing cloud-native infrastructure and applications
- Experience with DevSecOps practices and integrating security into CI/CD pipelines
- Understanding of cloud architecture concepts (IaaS/PaaS/SaaS) and the ability to apply security principles across cloud environments
- Familiarity with OWASP (including guidance for cloud-native applications) and NIST frameworks
- Experience in regulated environments (financial services or FINRA preferred)
- Strong communication skills across technical and non-technical stakeholders
Preferred Qualifications:
- Experience with AWS, Azure, or other major cloud platforms
- Certifications such as AWS Security Specialty, CISSP, or CCSP
- Experience with SAST/DAST tools
- Exposure to cloud governance and risk frameworks
- Familiarity with cloud-specific threats such as misconfiguration, data exfiltration, and identity/access compromise
Similar jobs
- MT
AVP, Infrastructure (IaC / Multi-Cloud Architecture / AI) - REMOTE
Molina Talent Acquisition · United States · Hybrid 🇺🇸
Stakeholder ManagementWorkforce PlanningSQL+13TechnologySalary not listed - AE

Senior Software Architecture & Cloud Engineer with Security ClearanceRecently posted
Aerospace Corporation · El Segundo, CA · On-site 🇺🇸
MicroservicesAWSAzure+2Technology$166.4k - $249.6k/yr - CS
Infrastructure & LiveOps EngineerRecently posted
City State Entertainment, LLC · United States · Remote 🇺🇸
GCPMongoDBGit+12Salary not listed - IR
Cloud Data Engineer IRecently posted
Ivy Rehab · United States · Remote 🇺🇸
ScalaETLSnowflake+11TechnologySalary not listed - SA
Cloud Engineer with Security ClearanceRecently posted
SAIC · Washington, DC · Hybrid 🇺🇸
DockerDynamoDBGCP+23Technology$100.0k - $140k/yr - IF

Oracle Cloud Infrastructure (OCI) Engineer - Interim Secret or H with Security ClearanceRecently posted
ITC Federal · Washington, DC · Hybrid 🇺🇸
DockerOracleAWS+6TechnologySalary not listed - GO

Network Engineer SME with Security ClearanceRecently posted
GovCIO · Arlington, VA · Hybrid 🇺🇸
AWSLoad BalancingAzure+1Technology$161.9k - $199.3k/yr - LE

Field/Base Communications Network Engineer with Security ClearanceRecently posted
Leidos · Bethesda, MD · Hybrid 🇺🇸
EncryptionAnsibleCDN+6Technology$40 - $48/hr - JG

Infrastructure EngineerRecently posted
Judge Group, Inc. · Waterloo, IA · On-site 🇺🇸
Microsoft OfficeTechnology$22 - $25/hr - MR

Cloud Architect /C# / .NET, Scientific CompanyRecently posted
Motion Recruitment Partners, LLC · Milford, MA · Hybrid 🇺🇸
MicroservicesAWSSOC 2+9TechnologySalary not listed - IN
Senior VMware EngineerRecently posted
Innosoft Corporation · Columbia, SC · Hybrid 🇺🇸
PowerShellVMwareEncryption+2TechnologySalary not listed - CA

Salesforce Data Cloud ArchitectRecently posted
Capgemini America, Inc. · IL · Hybrid 🇺🇸
DatabricksGenerative AITechnology$101.1k - $182.6k/yr
