Cybersecurity Engineer — Secure Cloud, AI & DevSecOps

Grayscale Investments; Stamford (CT); On-site; USD 140,000 - 190,000; Full time

Job summary

Grayscale Investments in Stamford, CT is seeking a Cybersecurity Engineer to build and maintain security capabilities across our technology platforms. You will implement security controls, automate processes, and embed secure-by-design principles throughout the software development lifecycle in cloud, AI-enabled systems, and enterprise apps.

Collaborating with engineering, product, and compliance teams, you will strengthen cloud and application security, improve detection and monitoring, and

Qualifications

• 5+ years of experience in cybersecurity, cloud security, or DevSecOps.
• Experience implementing security controls in cloud-native environments, preferably AWS.
• Strong fundamentals in IAM, data protection, network security, monitoring, and incident response.
• Experience integrating security into CI/CD and SSDLC practices.
• Proficient in Python, Terraform, and infrastructure-as-code.
• Familiarity with Kubernetes, APIs, and modern app architectures.
• Experience with SIEM/SOAR, vulnerability management, and detection platforms.
• Experience in regulated financial services environments.
• Excellent collaboration across engineering, infra, product, and security teams.

Responsibilities

• Partner with engineering teams to implement security controls and secure design patterns across cloud infrastructure, enterprise applications, developer platforms, and AI-enabled systems.
• Build and operationalize security controls that protect sensitive data, including identity and access management, data protection, network security, logging, monitoring, and auditability.
• Participate in threat modeling, architecture reviews, and security assessments for applications, cloud platforms, and emerging technologies, identifying and mitigating security risks before deployment.
• Implement and maintain security controls for cloud platforms, APIs, developer tooling, and third-party technologies.
• Build monitoring, detection, alerting, and incident response capabilities in partnership with engineering and security operations teams.
• Integrate security tooling and automation into CI/CD pipelines and cloud-native engineering workflows using Infrastructure-as-Code and policy-as-code practices.
• Support secure software development by partnering with engineering teams to embed security throughout the Secure Software Development Lifecycle (SSDLC).
• Assess and mitigate technical and operational risks associated with cloud platforms, enterprise applications, AI-enabled systems, and third-party providers.
• Partner with compliance, audit, and business stakeholders to ensure technology solutions meet regulatory, control, and governance requirements.
• Contribute to the development of security standards, engineering patterns, automation, and operational best practices across the organization.
• Stay current on emerging security threats, technologies, and industry best practices while helping strengthen Grayscale's long-term security capabilities.

Skills

Python

Infrastructure-as-Code

Automation

Cloud security

Application security

DevSecOps

Threat modeling

Secure SDLC/SSDLC

Communication

Tools

AWS

Kubernetes

Terraform

SIEM/SOAR

Vulnerability management tools

Job description

Grayscale Investments in Stamford, CT is seeking a Cybersecurity Engineer to build and maintain security capabilities across our technology platforms. You will implement security controls, automate processes, and embed secure-by-design principles throughout the software development lifecycle in cloud, AI-enabled systems, and enterprise apps.

Collaborating with engineering, product, and compliance teams, you will strengthen cloud and application security, improve detection and monitoring, and