Cloud Security Engineer

Job Description
An innovative quantitative investment firm headquartered in Boston is looking for a Senior Cloud Security Engineer to lead the development and execution of comprehensive cloud security strategies within a collaborative DevSecOps setting. This pivotal role combines strategic vision with practical implementation as you establish and oversee robust AWS cloud security measures.
You will design scalable automation for cloud environments, proactively enhance security posture, and work cross-functionally with architecture, engineering, and technology teams to ensure leading practices and regulatory compliance. The position provides the opportunity to influence cloud security architecture, drive ongoing improvements, and mentor both technical peers and leadership in the latest cloud security principles, all within a rapidly evolving fintech organization. Required Skills & Experience

• Demonstrated track record securing AWS cloud infrastructures using a mix of native, open-source, and enterprise-grade solutions
• In-depth expertise with AWS security frameworks and services (such as SCP, KMS, GuardDuty, SecurityHub, IAM, VPCE, Macie, Inspector)
• Advanced proficiency in Python (especially with Boto3 or similar libraries) and CloudFormation for building automation and seamless integration
• Experience implementing security for containers, Kubernetes, and across the software development lifecycle (SDLC)
• Hands-on involvement with vulnerability management, endpoint protection, and runtime threat detection in cloud settings
• Strong track record of collaborating across engineering, architectural, and executive teams
• Exceptional written, verbal, and presentation skills
• Bachelor's degree in computer science or a closely related discipline

Preferred Skills & Experience

• Familiarity with Terraform or related Infrastructure-as-Code tools
• Experience with core networking concepts (routing, switching, etc.)
• Knowledge of microservices ecosystems, particularly EKS and ECS
• Background in incident response or experience as part of a CSIRT
• Ability to influence, advise, and guide senior stakeholders on pivotal technical decisions

Key Responsibilities

• Completely hands-on engineering role
• Architect, implement, and troubleshoot scalable cloud automation and security controls
• Collaborate with cross-disciplinary teams to refine workflows and support data-driven decision-making
• Devise and maintain tools for monitoring experiments, overseeing deployments, and automating security evaluations
• Continuously analyze system behavior to uphold reliability and swiftly mitigate issues, ensuring optimal security performance
• Champion initiatives for ongoing security improvements and promote a culture of best-in-class cloud security throughout the organization

Compensation & Benefits

• Eligible for bonus or commission
• Comprehensive health coverage (medical, dental, vision)
• Generous paid time off (PTO)
• 401(k) with employer matching (if applicable)
• Candidates must be legally able to work in the US on a full-time, ongoing basis