Cybersecurity Engineer — Cloud & SSDLC Security

Grayscaleinvestments; Stamford (CT); On-site; USD 120,000 - 180,000; Full time

Job summary

Grayscale Investments is seeking a Cybersecurity Engineer to build, implement, and maintain security capabilities across our technology platforms, including cloud infrastructure, AI-enabled systems, and enterprise applications.

You will work with engineering, product, and compliance teams to embed secure-by-design principles, strengthen cloud and application security, and improve detection and monitoring capabilities while aligning with regulatory expectations.

Qualifications

• 5+ years of experience in cybersecurity, security engineering, or DevSecOps.
• Experience securing cloud-native environments (AWS preferred).
• Strong IAM, data protection, network security, monitoring and incident response.
• Experience integrating security into CI/CD and SSDLC.
• Strong programming/scripting (Python, Terraform) to automate controls.
• Familiarity with Kubernetes, APIs, and cloud architectures.
• Experience with SIEM/SOAR, vulnerability management, or detection platforms.
• Ability to collaborate across engineering, infra, product and security teams.

Responsibilities

• Partner with engineering to implement security controls across cloud infra and apps.
• Build and operate data protection, IAM, network security, logging and auditing.
• Lead threat modeling, architecture reviews and security assessments.
• Maintain security controls for cloud platforms, APIs, and tooling.
• Develop monitoring, detection, alerting, and incident response capabilities.
• Integrate security tooling into CI/CD and policy-as-code practices.
• Support SSDLC and regulatory/compliance requirements.

Skills

Security engineering

Cloud security

DevSecOps

CI/CD

Python

Terraform

IAM

Threat modeling

Communication

Tools

Terraform

Kubernetes

SIEM/SOAR

Security tooling

Endpoint security

Job description

Grayscale Investments is seeking a Cybersecurity Engineer to build, implement, and maintain security capabilities across our technology platforms, including cloud infrastructure, AI-enabled systems, and enterprise applications.

You will work with engineering, product, and compliance teams to embed secure-by-design principles, strengthen cloud and application security, and improve detection and monitoring capabilities while aligning with regulatory expectations.