Cloud Security Engineer

Lakeview Loan Servicing, LLC; Coral Gables (FL); Remote; USD 120,000 - 160,000; Full time

Job summary

Bayview Asset Management seeks a Cloud Security Engineer to design, implement, and operate security controls across cloud environments. You will partner with platform, DevOps, architecture, risk, and compliance teams to protect workloads and data while enabling secure business delivery.

The ideal candidate has hands-on AWS/Azure experience, CSPM/CNAPP, policy as code, and IaC, plus strong scripting and collaboration skills to embed security into landing zones and CI/CD pipelines.

Qualifications

• BA/BS in Computer Science, Computer Engineering, Information Systems, Cybersecurity, or equivalent experience.
• 5 years of information security, cloud engineering, systems engineering, or related roles, incl. hands-on AWS/Azure.
• Experience administering CSPM/CNAPP or cloud workload protection and remediation.
• Experience implementing cloud guardrails, policy as code, and IaC in enterprise clouds.
• Experience creating cloud security standards, baselines, and secure design patterns.
• Experience with cloud monitoring, vulnerability management, incident response, and remediation workflows.
• Experience in highly regulated environments, preferably Financial Services.

Responsibilities

• Design, implement, and maintain security controls and reference architectures for cloud environments (IaaS, PaaS, containers, serverless).
• Manage CSPM and cloud-native security tools, onboarding accounts and tuning policies.
• Build guardrails through policy as code, IaC, and automated compliance checks.
• Develop and publish cloud security standards, baselines, patterns, and procedures.
• Embed security requirements into landing zones, CI/CD pipelines, templates, and designs.
• Review IAM, network segmentation, encryption, key management, and data protection across clouds.
• Maintain least-privilege access models and workload identity protections in AWS and Azure.
• Monitor cloud security findings, coordinate risk-based remediation with teams.

Skills

Cloud security

Security engineering

CI/CD security

Policy as code

Vulnerability management

Incident response

Threat modeling

Strong communication

Risk assessment

Education

BA/BS in Computer Science or related field

Tools

Terraform

CloudFormation

Python

Bash

PowerShell

CI/CD pipelines

Job description

Overview

POSITION SUMMARY

The Cloud Security Engineer designs, implements, and operates security controls across the organization's cloud environments. This position partners with cloud platform, infrastructure, application, DevOps, architecture, risk, and compliance teams to protect cloud workloads and data while enabling secure business delivery. The successful candidate must be familiar with cloud-native security services, identity and access management, network security, data protection, logging and monitoring, vulnerability management, incident response, and secure cloud architecture practices.

ESSENTIAL DUTIES AND RESPONSIBILITIES

The following job functions are not all-inclusive. The employee will be required to perform other job-related tasks/responsibilities as requested. Job duties may change as required by needs of company.

• Design, implement, and maintain security controls and reference architectures for cloud environments across IaaS, PaaS, container, serverless, and managed-service workloads.
• Manage and optimize Cloud Security Posture Management (CSPM) and related cloud-native security tools, including onboarding accounts and subscriptions, tuning policies, validating findings, reporting risk, and coordinating remediation.
• Build, deploy, and maintain preventive and detective cloud guardrails through policy as code, infrastructure as code, automated compliance checks, and cloud-native policy services.
• Develop, publish, and maintain cloud security standards, baselines, patterns, and procedures aligned with business requirements, regulatory obligations, and recognized security frameworks.
• Partner with cloud platform, DevOps, application, and architecture teams to embed security requirements into landing zones, CI/CD pipelines, templates, and solution designs.
• Review cloud architectures and configurations for identity and access management, network segmentation, private connectivity, encryption, key management, secrets management, logging, and data protection.
• Implement and maintain least-privilege access models, privileged access controls, service identities, and workload identity protections across AWS and Azure.
• Monitor and investigate cloud security findings, misconfigurations, vulnerabilities, anomalous activity, and policy violations, and coordinate risk-based remediation with accountable teams
• Create and maintain cloud security documentation, diagrams, runbooks, metrics, and risk reports for technical and leadership audience
• Participate in the Security Engineering team on-call rotation.

SKILLS/KNOWLEDGE/ABILITIES

Required Experience

• BA/BS in Computer Science, Computer Engineering, Information Systems, Cybersecurity, or a related field, or equivalent experience
• 5 years of experience in information security, cloud engineering, systems engineering, or related technology roles, including hands-on experience securing AWS and/or Azure environments
• Experience administering CSPM, Cloud-Native Application Protection Platform (CNAPP), or cloud workload protection capabilities and driving findings through remediation
• Experience implementing cloud guardrails, policy as code, and infrastructure as code in enterprise cloud environments
• Experience creating and applying cloud security standards, configuration baselines, and secure design patterns
• Experience with cloud security monitoring, vulnerability management, incident response, and remediation workflows
• Experience in highly regulated environments, preferably Financial Services or similar

Knowledge and Skills Required

• Strong knowledge of AWS and Azure security services, shared-responsibility models, account and subscription governance, and secure cloud architecture principles
• Knowledge of cloud identity and access management, privileged access, role-based access control, and least-privilege design
• Knowledge of cloud network security, segmentation, private endpoints, firewalls, web application protection, DNS security, and secure connectivity patterns
• Knowledge of encryption, key and certificate management, secrets management, data classification, storage security, and backup and recovery controls
• Skill with Terraform, CloudFormation, or comparable infrastructure-as-code technologies and source-control workflows
• Skill with Python, Bash, PowerShell, or comparable scripting languages used to automate security controls and reporting
• Ability to interpret CSPM findings, cloud logs, vulnerability data, and security alerts and translate them into prioritized corrective actions
• Knowledge of security frameworks and cloud benchmarks such as NIST, CIS, and Cloud Security Alliance guidance
• Strong research, analytical, troubleshooting, and risk-assessment skills
• Strong verbal and written communication skills, with the ability to explain cloud security requirements to technical teams and business stakeholders
• Quick learner who is adaptable, collaborative, customer-service oriented, and accountable for closing the loop with stakeholders

CERTIFICATIONS, LICENSES, and/or REGISTRATION

• Preferred certifications include CCSP, CISSP, AWS Certified Security - Specialty, AWS Certified Solutions Architect, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Cybersecurity Architect Expert, GIAC Cloud Security certifications, or equivalent cloud and security credentials

LOCATION & COMPENSATION

• This role will be a remote position, however if we find a candidate near one of our office locations (Coral Gables, FL, Fort Lauderdale, FL, Denver, CO or New York, NY), a hybrid scheduled (Tues - Thurs) is preferred.
• A performance based bonus will be available as well as a base salary.
• Compensation will depend on experience and skillset brought by individual candidates.

EEOC

Bayview Asset Management is an Equal Employment Opportunity employer. All aspects of consideration for employment and employment with the Company are governed on the basis of merit, competence and qualifications without regard to race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, or any other category protected by federal, state, or local law.