Cloud Security Engineer

Overview

As a Senior Cloud Security Engineer, you will lead the charter for maturing TRM’s cloud infrastructure and security systems at scale. You will design strategy, implement best practices, and support secure business solutions.

What you'll do

• Provide technical guidance and leadership as a cybersecurity expert on architecture, configuration management, and environment design.
• Leverage automation tools, configuration management, and infrastructure-as-code (IaC) solutions to standardize security across all environments.
• Guide engineering, product, leadership, and other relevant stakeholders and ensure alignment with security strategies.
• Identify and communicate cloud platform vulnerabilities and mitigation options to stakeholders while balancing business agility with security.
• Serve as a Cloud Security Subject Matter Expert (SME) by maintaining knowledge of industry-recognized cloud security technologies and concepts.
• Engage and assist lines of business to understand their needs and develop secure business solutions.
• Drive security improvements in the GCP environment.
• Perform Identity and Access Management (IAM) in GCP to maintain principles of least privilege and role-based access control.
• Participate in audits of the cloud environment by working with external auditors and internal resources to ensure expectations are met.
• Prioritize rapid threat assessments by efficiently performing security risk assessments and triaging vulnerabilities based on immediate risk to the business.
• Integrate security testing and reviews within the Product Shipping Framework and CI/CD pipelines.
• Conduct just-in-time security training for developers and engineers, offering real-time advice and code reviews.
• Leverage lightweight and efficient security tools that can be quickly integrated into development environments without slowing down deployments.

What you'll need

• Relevant industry experience in managing cloud security programs, Identity Access Management (IAM), and cloud-native security solutions such as firewalls.
• Expert-level knowledge of cloud infrastructure components, preferably with GCP.
• Strong bias for action.
• Ability to juggle multiple priorities and create a sense of urgency in a fast-paced, dynamic environment.
• Ability to audit and provide audit support for security controls within the cloud environment.
• Experience with infrastructure vulnerability testing tools.
• Experience with Cloud Application Platforms (Heroku).
• Experience with Infrastructure as code tools (Terraform).

Details

• Location: United States.
• Team’s time zones include Eastern Standard Time (EST - GMT-4), Pacific Standard Time (PST - GMT-7), and Central European Summer Time (CET - GMT+2).