Cloud Security Engineer

Cetera; Dallas (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Mental health benefits

Paid time off (PTO)

Paid holidays

401(k) with company contribution

Paid parental leave

Health Savings and Flexible Spending

Job summary

Cetera is seeking a security engineer to lead secure design, deployment, and governance of cloud-based systems in a regulated financial environment. You will collaborate with IT Risk, Cloud Security, and Engineering teams to implement secure cloud architectures and CI/CD integrations.

Ideal candidates have hands-on cloud-native security experience, knowledge of OWASP and NIST, and strong communication skills to bridge technical and non-technical stakeholders.

Qualifications

• 3+ years of experience in cloud security, application security, or a combination of both.
• Hands-on experience securing cloud-native infrastructure and applications.
• Experience with DevSecOps practices and integrating security into CI/CD pipelines.
• Understanding of cloud architecture concepts (IaaS/PaaS/SaaS) and the ability to apply security principles across cloud environments.
• Familiarity with OWASP (including guidance for cloud-native applications) and NIST frameworks.
• Experience in regulated environments (financial services or FINRA preferred).
• Strong communication skills across technical and non-technical stakeholders.

Responsibilities

• Identify, assess, and mitigate security risks associated with cloud systems and services.
• Implement controls aligned to OWASP guidance for cloud-native applications and NIST frameworks.
• Perform threat modeling for cloud-enabled applications.
• Propose and validate technical guardrails to prevent unauthorized cloud access and support secure cloud development.
• Identify and assess risk from unsanctioned cloud tool usage across the enterprise.
• Evaluate third-party cloud tools for risk and compliance.
• Design and secure cloud-based workloads.
• Integrate security into CI/CD pipelines; Partner with IT Risk, Cloud Security, and Engineering teams.
• Support incident response for cloud-related threats.
• Develop security standards, runbooks, and architecture documentation.
• Support audits and regulatory compliance activities.

Skills

Cloud security

Application security

DevSecOps

Threat modeling

Tools

CI/CD security tooling

SAST/DAST tools

Job description

At Cetera, our Information Security organization protects employees, advisors, and clients from evolving cyber threats across cloud, SaaS, and enterprise IT environments. As cloud adoption continues to expand across the enterprise, Cetera is investing in secure cloud architecture, governance, and risk mitigation to ensure innovation aligns with regulatory and security expectations.

We are seeking a skilled security engineer with a strong cloud and application security background to lead and support the secure design, deployment, and governance of cloud-based systems. This role will serve as a key bridge across IT Risk, Cloud Security, Cloud Engineering, and Application Development teams, ensuring cloud services are implemented securely within a regulated financial environment.

What will you do:

• Identify, assess, and mitigate security risks associated with cloud systems and services
• Implement controls aligned to OWASP guidance for cloud-native applications and NIST frameworks
• Perform threat modeling for cloud-enabled applications
• Propose and validate technical guardrails to prevent unauthorized cloud access and support secure cloud development
• Identify and assess risk from unsanctioned cloud tool usage across the enterprise
• Evaluate third-party cloud tools for risk and compliance
• Design and secure cloud-based workloads
• Integrate security into CI/CD pipelinesPartner with IT Risk, Cloud Security, and Engineering teams
• Support incident response for cloud-related threats
• Develop security standards, runbooks, and architecture documentation
• Support audits and regulatory compliance activities

What you will have:

• 3+ years of experience in cloud security, application security, or a combination of both
• Hands-on experience securing cloud-native infrastructure and applications
• Experience with DevSecOps practices and integrating security into CI/CD pipelines
• Understanding of cloud architecture concepts (IaaS/PaaS/SaaS) and the ability to apply security principles across cloud environments
• Familiarity with OWASP (including guidance for cloud-native applications) and NIST frameworks
• Experience in regulated environments (financial services or FINRA preferred)
• Strong communication skills across technical and non-technical stakeholders

Preferred Qualifications:

• Experience with AWS, Azure, or other major cloud platforms
• Certifications such as AWS Security Specialty, CISSP, or CCSP
• Experience with SAST/DAST tools
• Exposure to cloud governance and risk frameworks
• Familiarity with cloud-specific threats such as misconfiguration, data exfiltration, and identity/access compromise

About Us

What we give you in return:

• Inclusive health, dental, vision, and life insurance plans built to support diverse lifestyles, offer preventative care, and protect against hardship.
• Easy access to mental health benefits to meet our team members and their families where they are.
• 20+ days of paid time off (PTO), paid holidays, and 2 paid wellness days to give our employees the time they need to stay close with their loved ones, recharge, and give back to their communities.
• 401(k) savings plan with a generous company contribution (up to 5%), and access to a financial professional to offer our employees the opportunity to plan-ahead for a strong financial future well beyond their working years.
• Paid parental leave to support all team members with birth, adoption, and fostering.
• Health Savings and Flexible Spending Account options to help you save money on healthcare, daycare, commuting, and more.
• Employee Assistance Program (EAP), LifeLock, Pet Insurance and more.
• Paid caregiver leave to provide time away from work when caring for an ill or recovering family member.
• Additional benefits such as an Employee Assistance Program (EAP), identity theft protection (LifeLock), pet insurance, and other voluntary benefits to provide extra peace of mind

About Cetera

Cetera Financial Group® (Cetera) is a leading network of independent retail broker-dealers and registered investment advisers empowering the delivery of objective financial advice to individuals, families, and company retirement plans across the country through trusted financial advisors and financial institutions. Cetera is one of the largest independent financial advisor networks in the nation and a leading provider of retail services to the investment programs of banks and credit unions.

Advisor support resources offered through Cetera include award-winning wealth management and advisory platforms, comprehensive broker-dealer and registered investment adviser services, practice management support, and innovative technology.

Cetera Financial Group (Cetera) is a network of independent retail firms, including those that are members of FINRA/SIPC: Cetera Advisors LLC; Cetera Wealth Services, LLC (formerly known as Cetera Advisor Networks); Cetera Investment Services LLC (marketed as Cetera Financial Institutions or Cetera Investors); and Cetera Financial Specialists LLC. Entities registered as investment advisers with the Securities and Exchange Commission include Cetera Investment Management LLC and Cetera Investment Advisers LLC. Cetera's principal office is located at 655 W. Broadway, 11th Floor, San Diego, CA 92101. Avantax Planning Partners, Inc. is an SEC registered investment adviser within the Aretec Group, Inc. (dba Cetera Holdings, an affiliate of Cetera). All the referenced entities are under common ownership.

Cetera Financial Group is committed to providing an equal employment opportunity for all applicants and employees. For us, this is the only acceptable way to do business. Accordingly, all employment decisions at Cetera Financial Group, including those relating to hiring, promotion, transfers, benefits, compensation, and placement, will be made without regard to race, color, ancestry, national origin, citizenship, age, physical and/or mental disability, medical condition, pregnancy, genetic characteristics, religion, religious dress and/or grooming, gender, gender identity, gender expression, sexual orientation, marital status, U.S. military status, political affiliation, or any other class protected by state and/or federal law.

Agencies please note: this recruitment assignment is being managed directly by Cetera’s Talent Acquisition team. We will reach out to our preferred agency partners in the rare instance we require additional talent options. Your respect for this process is appreciated.

Please review our Workforce Privacy Policy for further details on what information we collect and the purposes for collection.