Cloud Security Engineer — DevSecOps & SSDLC Lead

Alerus Financial; Grand Forks (ND); On-site; USD 90,000 - 130,000; Full time

Job summary

Alerus Financial is seeking a Cloud Security Engineer to design and implement security controls across cloud platforms and enterprise applications. You will lead DevSecOps practices, threat modeling, and vulnerability management while collaborating with technology and business teams.

The role emphasizes secure SDLC, incident response, and security automation to protect critical systems and data in a banking environment.

Qualifications

• Bachelor's degree or equivalent in Information Security, Computer Science, Engineering, or related field.
• 5–7 years of information security experience; 3–5 years in cloud security engineering.
• CISSP, CCSP, Microsoft Security certifications, GIAC, CSSLP, or AWS Security Specialty preferred.

Responsibilities

• Design, implement, and maintain security controls across cloud platforms, SaaS environments, and enterprise apps.
• Develop and maintain security standards, architectures, policies, and procedures.
• Lead cloud security technologies, IAM, Zero Trust, and security posture management.
• Perform security assessments, threat modeling, architecture reviews, vulnerability management, and penetration testing.
• Establish SSDLC and DevSecOps practices including secure coding, code reviews, and CI/CD security integration.
• Monitor, investigate, and respond to security threats and incidents across cloud and application environments.
• Automate security processes and enhance monitoring and reporting using scripting and IaC tools.
• Support disaster recovery, regulatory compliance, audits, and third-party security reviews.
• Provide security leadership, risk guidance, and reporting for enterprise initiatives.

Skills

Cloud security

DevSecOps

Threat modeling

Vulnerability management

Incident response

IAM

CI/CD security

Zero Trust

Security automation

Education

Bachelor's degree in Information Security/CS/Engineering

Security certifications (CISSP, CCSP, MS Security, GIAC, CSSLP, AWS Security Specialty)

Job description

Alerus Financial is seeking a Cloud Security Engineer to design and implement security controls across cloud platforms and enterprise applications. You will lead DevSecOps practices, threat modeling, and vulnerability management while collaborating with technology and business teams.

The role emphasizes secure SDLC, incident response, and security automation to protect critical systems and data in a banking environment.