Cloud Security Engineer - Secure Cloud & DevSecOps

Cetera; Dallas (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Mental health benefits

Paid time off (PTO)

Paid holidays

401(k) with company contribution

Paid parental leave

Health Savings and Flexible Spending

Job summary

Cetera is seeking a security engineer to lead secure design, deployment, and governance of cloud-based systems in a regulated financial environment. You will collaborate with IT Risk, Cloud Security, and Engineering teams to implement secure cloud architectures and CI/CD integrations.

Ideal candidates have hands-on cloud-native security experience, knowledge of OWASP and NIST, and strong communication skills to bridge technical and non-technical stakeholders.

Qualifications

• 3+ years of experience in cloud security, application security, or a combination of both.
• Hands-on experience securing cloud-native infrastructure and applications.
• Experience with DevSecOps practices and integrating security into CI/CD pipelines.
• Understanding of cloud architecture concepts (IaaS/PaaS/SaaS) and the ability to apply security principles across cloud environments.
• Familiarity with OWASP (including guidance for cloud-native applications) and NIST frameworks.
• Experience in regulated environments (financial services or FINRA preferred).
• Strong communication skills across technical and non-technical stakeholders.

Responsibilities

• Identify, assess, and mitigate security risks associated with cloud systems and services.
• Implement controls aligned to OWASP guidance for cloud-native applications and NIST frameworks.
• Perform threat modeling for cloud-enabled applications.
• Propose and validate technical guardrails to prevent unauthorized cloud access and support secure cloud development.
• Identify and assess risk from unsanctioned cloud tool usage across the enterprise.
• Evaluate third-party cloud tools for risk and compliance.
• Design and secure cloud-based workloads.
• Integrate security into CI/CD pipelines; Partner with IT Risk, Cloud Security, and Engineering teams.
• Support incident response for cloud-related threats.
• Develop security standards, runbooks, and architecture documentation.
• Support audits and regulatory compliance activities.

Skills

Cloud security

Application security

DevSecOps

Threat modeling

Tools

CI/CD security tooling

SAST/DAST tools

Job description

Cetera is seeking a security engineer to lead secure design, deployment, and governance of cloud-based systems in a regulated financial environment. You will collaborate with IT Risk, Cloud Security, and Engineering teams to implement secure cloud architectures and CI/CD integrations.

Ideal candidates have hands-on cloud-native security experience, knowledge of OWASP and NIST, and strong communication skills to bridge technical and non-technical stakeholders.