Cloud Security Engineer - DevSecOps & API Protector

Popular; Florida; On-site; USD 120,000 - 160,000; Full time

Job summary

Popular is seeking a Cloud Security Engineer in Florida to secure software across the SDLC, collaborating with in‑house developers and vendors to ensure security, privacy, and compliance are built into applications. You will apply cloud principles, containerization, and CI/CD security to protect services and data.

Responsibilities include implementing and tuning Terraform, Akamai API Security, and IAM controls; performing threat modeling and security reviews; and promoting secure design patterns

Qualifications

• Bachelor’s degree in computer science, software engineering, information systems or related field.
• At least five years of experience in security aspects of software engineering.
• Experience with key application security tools such as Veracode, Qualys WAS, Checkmarx, GitLab, etc.

Responsibilities

• Secure software built and maintained by Popular across the Software Development Lifecycle.
• Collaborate with development teams and vendors to integrate security into design and deployment.
• Tune security tooling (Akamai API Security) to reduce false positives while maintaining visibility into high‑risk activity.
• Lead security reviews, threat modeling, and penetration testing of applications and services.
• Develop accelerators, security APIs, and automation for IAM governance and access control.

Skills

Cloud security

DevSecOps

IAM governance

Threat modeling

API security

Python scripting

REST APIs

CI/CD security

Security reviews

Security automation

Education

Bachelor’s degree in computer science or related field

Tools

Terraform

Packer

Ansible

Kubernetes

Akamai API Security

GitLab

Jenkins

OPA/Cedar

AWS

Azure

Job description

Popular is seeking a Cloud Security Engineer in Florida to secure software across the SDLC, collaborating with in‑house developers and vendors to ensure security, privacy, and compliance are built into applications. You will apply cloud principles, containerization, and CI/CD security to protect services and data.

Responsibilities include implementing and tuning Terraform, Akamai API Security, and IAM controls; performing threat modeling and security reviews; and promoting secure design patterns