Cloud Security Engineer — DevSecOps & Zero Trust

Alerus Financial; Minnetonka (MN); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive benefits

Paid time off

Job summary

Alerus Financial is seeking a Cloud Security Engineer to design, implement, and enhance security controls across cloud platforms and enterprise applications. You will lead high-impact security initiatives, partner with technology and business teams, and help embed security throughout the technology lifecycle.

The role requires 5–7 years in information security with cloud security expertise, and relevant certifications such as CISSP or CCSP.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, or related field.
• 5-7 years of information security experience, including 3-5 years in cloud security engineering.
• Certifications such as CISSP, CCSP, Microsoft Security certifications, GIAC, CSSLP, or AWS Security Specialty.
• Experience securing Azure, Microsoft 365, Salesforce, and other cloud environments.
• Experience with DevSecOps, secure application development, vulnerability management, IAM, incident response, and threat detection.
• Strong knowledge of cloud security, identity governance, security automation, application security, CI/CD pipelines, threat modeling, and regulatory compliance frameworks.
• Strong analytical, communication, project management, and problem-solving skills.
• Ability to translate technical concepts for business audiences and balance security requirements with business objectives.
• Self-motivated, collaborative, customer-focused professional with a passion for technology and cybersecurity.

Responsibilities

• Design, implement, and maintain security controls across cloud platforms, SaaS environments, and enterprise applications.
• Develop and maintain security standards, architectures, policies, and operational procedures.
• Manage cloud security technologies, identity and access management, Zero Trust initiatives, and security posture management.
• Perform security assessments, threat modeling, architecture reviews, vulnerability management, penetration testing, and control validation.
• Establish and support SSDLC and DevSecOps practices, including secure coding standards, code reviews, CI/CD security integration, and developer guidance.
• Monitor, detect, investigate, and respond to security threats, incidents, and indicators of compromise across cloud and application environments.
• Automate security processes and enhance monitoring, logging, and reporting capabilities using scripting, APIs, AI, and IaC tools.
• Support disaster recovery, business continuity, regulatory compliance, audits, and third-party/vendor security reviews.
• Provide security leadership, risk guidance, and reporting for enterprise technology initiatives and business projects.
• Maintain security documentation and coordinate remediation efforts to address identified risks and vulnerabilities.

Skills

Cloud security

IAM

DevSecOps

Vulnerability management

Threat detection

SSDLC

CI/CD security

Security architecture

Education

Bachelor's degree in Information Security

Tools

Azure

Microsoft 365

Salesforce

Job description

Alerus Financial is seeking a Cloud Security Engineer to design, implement, and enhance security controls across cloud platforms and enterprise applications. You will lead high-impact security initiatives, partner with technology and business teams, and help embed security throughout the technology lifecycle.

The role requires 5–7 years in information security with cloud security expertise, and relevant certifications such as CISSP or CCSP.