Cloud Security Engineer

Alerus Financial; Minnetonka (MN); Sur place; USD 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Competitive compensation

Comprehensive benefits

Paid time off

Résumé du poste

Alerus Financial is seeking a Cloud Security Engineer to design, implement, and enhance security controls across cloud platforms and enterprise applications. You will lead high-impact security initiatives, partner with technology and business teams, and help embed security throughout the technology lifecycle.

The role requires 5–7 years in information security with cloud security expertise, and relevant certifications such as CISSP or CCSP.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, or related field.
• 5-7 years of information security experience, including 3-5 years in cloud security engineering.
• Certifications such as CISSP, CCSP, Microsoft Security certifications, GIAC, CSSLP, or AWS Security Specialty.
• Experience securing Azure, Microsoft 365, Salesforce, and other cloud environments.
• Experience with DevSecOps, secure application development, vulnerability management, IAM, incident response, and threat detection.
• Strong knowledge of cloud security, identity governance, security automation, application security, CI/CD pipelines, threat modeling, and regulatory compliance frameworks.
• Strong analytical, communication, project management, and problem-solving skills.
• Ability to translate technical concepts for business audiences and balance security requirements with business objectives.
• Self-motivated, collaborative, customer-focused professional with a passion for technology and cybersecurity.

Responsabilités

• Design, implement, and maintain security controls across cloud platforms, SaaS environments, and enterprise applications.
• Develop and maintain security standards, architectures, policies, and operational procedures.
• Manage cloud security technologies, identity and access management, Zero Trust initiatives, and security posture management.
• Perform security assessments, threat modeling, architecture reviews, vulnerability management, penetration testing, and control validation.
• Establish and support SSDLC and DevSecOps practices, including secure coding standards, code reviews, CI/CD security integration, and developer guidance.
• Monitor, detect, investigate, and respond to security threats, incidents, and indicators of compromise across cloud and application environments.
• Automate security processes and enhance monitoring, logging, and reporting capabilities using scripting, APIs, AI, and IaC tools.
• Support disaster recovery, business continuity, regulatory compliance, audits, and third-party/vendor security reviews.
• Provide security leadership, risk guidance, and reporting for enterprise technology initiatives and business projects.
• Maintain security documentation and coordinate remediation efforts to address identified risks and vulnerabilities.

Connaissances

Cloud security

IAM

DevSecOps

Vulnerability management

Threat detection

SSDLC

CI/CD security

Security architecture

Formation

Bachelor's degree in Information Security

Outils

Azure

Microsoft 365

Salesforce

Description du poste

Description

WHO ARE WE

Alerus is a commercial wealth bank and national retirement provider with one core purpose: helping clients achieve their financial goals. We are driven by a shared commitment to always do the right thing; leading with integrity and providing valued advice and guidance to our clients. We value the expertise and skillsets each team member provides and encourage collaboration, innovation, adaptability, and an entrepreneurial spirit at all levels of our company. By consistently seeking improvements and growth, we foster long-term relationships with clients and team members. We are proud to be recognized as a Top Workplace by numerous industry and regional outlets.

CORE VALUES:

Passion for Excellence :: Success is Never Final :: Do the Right Thing :: One Alerus

ABOUT THE ROLE:

The Cloud Security Engineer protects the organization's systems, applications, and data by leading cloud and application security initiatives. This role designs, implements, and continuously improves security controls across cloud platforms and internally developed applications, partnering with technology and business teams to embed security throughout the technology lifecycle. Provides expertise in cloud security architecture, identity management, DevSecOps, vulnerability management, threat detection, incident response, and security automation.

WHAT YOU'LL BE DOING:

• Design, implement, and maintain security controls across cloud platforms, SaaS environments, and enterprise applications.
• Develop and maintain security standards, architectures, policies, and operational procedures.
• Manage cloud security technologies, identity and access management, Zero Trust initiatives, and security posture management.
• Perform security assessments, threat modeling, architecture reviews, vulnerability management, penetration testing, and control validation.
• Establish and support Secure Software Development Lifecycle (SSDLC) and DevSecOps practices, including secure coding standards, code reviews, CI/CD security integration, and developer guidance.
• Monitor, detect, investigate, and respond to security threats, incidents, and indicators of compromise across cloud and application environments.
• Automate security processes and enhance monitoring, logging, and reporting capabilities using scripting, APIs, AI, and infrastructure-as-code tools.
• Support disaster recovery, business continuity, regulatory compliance, audits, and third-party/vendor security reviews.
• Provide security leadership, subject matter expertise, risk guidance, and reporting for enterprise technology initiatives and business projects.
• Maintain security documentation and coordinate remediation efforts to address identified risks and vulnerabilities.

WHAT YOU SHOULD HAVE:

• Bachelor's degree in Information Security, Computer Science, Engineering, or related field (or equivalent experience).
• 5-7 years of information security experience, including 3-5 years in cloud security engineering.
• Relevant certifications such as CISSP, CCSP, Microsoft Security certifications, GIAC, CSSLP, or AWS Security Specialty.
• Experience securing Azure, Microsoft 365, Salesforce, and other cloud environments.
• Experience with DevSecOps, secure application development, vulnerability management, IAM, incident response, and threat detection.
• Strong knowledge of cloud security, identity governance, security automation, application security, CI/CD pipelines, threat modeling, and regulatory compliance frameworks.
• Strong analytical, communication, project management, and problem-solving skills.
• Ability to translate technical concepts for business audiences and balance security requirements with business objectives.
• Self-motivated, collaborative, customer-focused professional with a passion for technology and cybersecurity.

WHAT WE BRING TO THE TABLE:

• Competitive compensation including base salary, bonus and/or incentive opportunities.
• Comprehensive benefits package providing a wide range of health and well-being benefits, including medical, dental, vision, life and long-term disability insurance; and 401(k) and ESOP for retirement savings.
• Generous paid time off programs such as flexible time off, company-paid holidays, parental and bereavement leave.
• Learning and development resources for personal and professional career development, and advancement opportunities.
• Access to financial experts for guidance, financial wellness tools, and discounts on Alerus products and services.
• Support for the communities we live in through paid volunteer time and a company donation match opportunity.

WORK ENVIRONMENT:

Work is typically performed in an office setting. The employee is regularly required to sit for extended periods of time. The employee is occasionally required to move about the office utilizing proper ergonomic safeguards when doing so. Additionally, the employee must occasionally lift or move supplies and materials up to 20 pounds.

BASE PAY RANGE:

$90,000 - $130,000 annually

The above information in this description has been designed to indicate the general nature and level of work performed by employees in this position. It is not designed to contain or be interpreted as an exhaustive list of all responsibilities, duties, and qualifications required of employees assigned to this job.

Alerus is an equal opportunity employer and values diversity. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.