Cloud Security Engineer — FinTech DevSecOps

Iralogix; Charlotte (NC); Hybrid; USD 110,000 - 150,000; Full time

Job summary

IRALOGIX, Inc. is seeking a Security Engineer to join a lean security team. You will help secure AWS infrastructure, containerized apps, CI/CD pipelines, SaaS platforms, and endpoints while partnering with DevOps and engineering teams.

The role targets a broad generalist with 2–4 years of security, DevOps, or cloud experience in cloud-first fintech environments. The position is hybrid, with 3–4 days per week in Charlotte, NC or Pittsburgh, PA, reporting to the Director of Security.

Qualifications

• 2–4 years of hands-on security, DevOps, or cloud engineering experience in modern environments.
• Familiarity with AWS IAM, containers (ECS, EKS), Terraform, SSO (Okta), and CI/CD workflows.
• Practical understanding of vulnerability management, secure coding, and cloud-native security tooling.
• Experience working in small teams or startups where everyone wears multiple hats.
• Comfort collaborating with developers, auditors, and cross-functional stakeholders.
• An eagerness to learn and improve—especially around AppSec, cloud IAM, and CI/CD security.
• Strong written and verbal communication skills.
• Familiarity with Java, Python, Go, or Rust.
• Experience securing GitHub Enterprise, Argos, Trivy, or other common DevSecOps tools.
• Prior exposure to compliance frameworks like SOC 2, CIS, or CSA CCM.
• Contributions to open source or personal security projects.

Responsibilities

• Cloud Security & IAM
• Support secure configuration of AWS services.
• Help develop identity and access guardrails across AWS and SaaS tools.
• Partner with DevOps to improve image lifecycle hygiene and container security.
• Work with engineering and platform teams to define security gates for CI/CD.
• Help standardize secure build practices, secrets management, and artifact handling.
• Vulnerability & Threat Management
• Support triage and remediation of vulnerabilities surfaced via cloud and endpoint scanners.
• Engage with our SOC to respond to security events across cloud, identity, endpoint, and app layers.
• Help developers address legacy library vulnerabilities and integrate secure coding practices.
• Participate in threat modeling, secure SDLC planning, and code/toolchain reviews.
• Governance & Compliance
• Assist in maintaining our SOC 2 Type II posture and mapping controls to frameworks (CSA CCM, CIS AWS).
• Collaborate with auditors and internal stakeholders to evidence controls and risk mitigation.
• Support Mac and Windows laptop security with device configuration/compliance management tools.
• Help govern secure SaaS usage, enforce device compliance, and manage privilege escalation.
• Contribute to internal security training, awareness campaigns, and documentation.
• Champion a collaborative, secure-by-default culture across development and operations.

Skills

Cloud security

DevOps

AWS IAM

CI/CD

Container security

Security fundamentals

AppSec basics

Communication skills

Tools

Terraform

Okta

ECS

EKS

GitHub Enterprise

Trivy

Argos

Job description

IRALOGIX, Inc. is seeking a Security Engineer to join a lean security team. You will help secure AWS infrastructure, containerized apps, CI/CD pipelines, SaaS platforms, and endpoints while partnering with DevOps and engineering teams.

The role targets a broad generalist with 2–4 years of security, DevOps, or cloud experience in cloud-first fintech environments. The position is hybrid, with 3–4 days per week in Charlotte, NC or Pittsburgh, PA, reporting to the Director of Security.