Cybersecurity Engineer - Cloud & DevSecOps Security

P2P; Stamford (CT); On-site; USD 130,000 - 190,000; Full time

Job summary

Grayscale Investments is seeking a Cybersecurity Engineer to build, implement, and maintain security capabilities across our technology platforms.

You will be responsible for implementing security controls, automating security processes, and integrating security throughout the software development lifecycle across cloud infrastructure, enterprise applications, AI-enabled systems, and modern engineering platforms.

Qualifications

• 5+ years of experience in cybersecurity, security engineering, cloud security, application security, DevSecOps, or a related engineering discipline.
• Experience implementing security controls within cloud-native environments, preferably AWS.
• Strong understanding of identity and access management, data protection, network security, vulnerability management, monitoring, and incident response.
• Experience integrating security into software development workflows, including CI/CD pipelines and SSDLC.
• Strong programming and scripting capabilities (e.g., Python, Terraform) to automate and validate security controls.
• Experience with cloud infrastructure, Kubernetes, APIs, and modern application architectures.
• Experience with security tooling such as SIEM/SOAR, vulnerability management, cloud security, endpoint security, application security, or detection engineering platforms.
• Strong communication skills and ability to collaborate across engineering, infrastructure, product, and security teams.

Responsibilities

• Partner with engineering teams to implement security controls and secure design patterns across cloud infrastructure, enterprise applications, developer platforms, and AI-enabled systems.
• Build and operationalize security controls that protect sensitive data, including IAM, data protection, network security, logging, monitoring, and auditability.
• Participate in threat modeling, architecture reviews, and security assessments for applications, cloud platforms, and emerging technologies, identifying and mitigating risks prior to deployment.
• Implement and maintain security controls for cloud platforms, APIs, developer tooling, and third-party technologies.
• Build monitoring, detection, alerting, and incident response capabilities in partnership with engineering and security operations teams.
• Integrate security tooling and automation into CI/CD pipelines and cloud-native workflows using Infrastructure-as-Code and policy-as-code practices.
• Support SSDLC by partnering with engineering teams to embed security throughout the development lifecycle.
• Assess and mitigate technical and operational risks for cloud platforms, enterprise apps, AI-enabled systems, and third-party providers.
• Work with compliance, audit, and business stakeholders to ensure regulatory and governance requirements are met.
• Contribute to security standards, engineering patterns, automation, and operational best practices across the organization.
• Stay current on emerging threats and technologies to strengthen Grayscale's long-term security capabilities.

Skills

Security engineering

Cloud security

DevSecOps

SSDLC

Python

Terraform

Infrastructure as Code

AWS

Kubernetes

CI/CD

SIEM/SOAR

Threat modeling

Compliance

Tools

Terraform

Kubernetes

SIEM/SOAR

CI/CD tooling

Job description

Grayscale Investments is seeking a Cybersecurity Engineer to build, implement, and maintain security capabilities across our technology platforms.

You will be responsible for implementing security controls, automating security processes, and integrating security throughout the software development lifecycle across cloud infrastructure, enterprise applications, AI-enabled systems, and modern engineering platforms.