Cloud Security Engineer / NYC / On-site

Job Description

This is an opportunity to join a fast-paced infrastructure team supporting secure, large-scale deployments of generative AI products for premier financial institutions. This is a full-time, onsite role based in New York City, working with AWS, Kubernetes, Terraform, and modern security and observability tooling to help deliver cutting-edge AI systems in highly regulated environments. You’ll work cross-functionally with internal engineering and AI teams, guiding security best practices, implementing compliance controls, and ensuring the integrity of AI-powered financial platforms.

As a Cloud Security Engineer, you’ll be responsible for designing and enforcing secure-by-default architectures, embedding automated guardrails, and strengthening the overall security posture of production systems. You’ll lead initiatives to protect sensitive financial data, establish compliance frameworks (SOC 2, ISO 27001), and implement zero trust principles across environments.

Required Skills & Experience

• 5+ years of experience in cloud security engineering, infrastructure security, or related roles
\n• Deep AWS security (IAM, VPC design, GuardDuty, Security Hub, encryption)
\n• Infrastructure-as-Code (AWS CDK, Pulumi, SST)
\n• Python / Go / Bash for automation
\n• Detection & incident response
\n• Zero trust principles & secrets management
\n• Hands-on experience implementing IAM, encryption, and network security controls in AWS
\n• Experience maintaining compliance with SOC 2, ISO 27001, or GDPR frameworks

Desired Skills & Experience

• Experience securing financial services applications or handling sensitive financial data
\n• Background in securing AI/ML infrastructure and data pipelines
\n• Familiarity with SaaS security controls and identity management (Okta, Google Workspace, etc.)
\n• Experience with AWS GuardDuty, Security Hub, or other threat detection tools
\n• Knowledge of zero trust architecture and secrets management
\n• Proven experience building or scaling security programs in high-growth environments

What You Will Be Doing

Tech Breakdown
\n• 60% Cloud Security Architecture & Automation (AWS, Terraform, IaC)
\n• 40% Detection, Compliance, and Continuous Monitoring

Daily Responsibilities
\n• 60% Designing and Hardening Secure Infrastructure
\n• 40% Security Auditing, Incident Response, and Team Collaboration

The Offer

Bonus Eligible

You Will Receive the Following Benefits
\n• Medical, Dental, and Vision Insurance
\n• Vacation Time
\n• Stock Options

Applicants must be currently authorized to work in the US on a full-time basis now and in the future.

#LI-JF6