Lead Cloud Security Engineer

DTCC; Tampa (FL); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive health insurance

Pension / Retirement benefits

Paid Time Off

Hybrid work model

Job summary

DTCC is seeking a Lead Cloud Security Engineer to drive security across AWS, Azure and GCP in a hybrid environment. You will mentor a team, shape security strategy and build scalable security solutions for enterprise workloads.

The role requires 6+ years in cloud security, strong leadership, and experience with automation and compliance frameworks. Remote-friendly with 3 days onsite and 2 days remote in the DTCC model.

Qualifications

• Minimum of 6 years of related cloud security experience.
• Bachelor's degree or equivalent experience.

Responsibilities

• Align cloud security strategy with business objectives and regulatory requirements for IaaS, PaaS, and SaaS.
• Identify deficiencies in cloud security services, propose improvements, and implement them.
• Find opportunities for automation and AI/ML capabilities across the stack.
• Evaluate and create cloud security baselines and monitor compliance.
• Document security policies, controls, and runbooks for operational readiness of engineered solutions.
• Provide Cloud and Compliance Security Engineering support as needed.
• Partner with stakeholders to introduce new security technologies for production.

Skills

Team leadership

AWS

Azure

GCP

Terraform

CI/CD

Security compliance

Python

PowerShell

Git

Education

Bachelor's degree or equivalent

Tools

Wiz

Terraform

GitHub/GitLab

Job description

Pay and Benefits:

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

The impact you will have in this role:

Being a part of CISO team, the purpose of Cloud Security Engineering team is to provide outstanding and versatile cloud security services to the enterprise securing the workloads, application and data in AWS, Azure and GCP. This position is for a Lead Cloud Security Engineer. The ideal person is passionate about building, mentoring and leading a highly motivated cloud security team.

Your Primary Responsibilities:

• Align cloud security strategy with business objectives and regulatory requirements for IaaS, PaaS, and SaaS
• Identify deficiencies in cloud security services, propose plans for improvement and implement them.
• Find opportunities for automation and improving AI/ML capabilities cross the technology stack.
• Evaluate and create cloud security baselines and implement monitoring to assure compliance.
• Document security policies, controls, and processes, and develop runbooks and how-to guides for operational readiness of engineered solutions.
• Provide Cloud and Compliance Security Engineering operational support as circumstances require
• Partner closely with stakeholders to prepare new security technologies and functionalities for implementation into the production environment. This includes but is not limited to, security standard methodologies.

NOTE: The Primary Responsibilities of this role are not limited to the details above.

Qualifications:

• Minimum of 6 years of related experience
• Bachelor's degree and/or equivalent experience

Talents Needed for Success:

• Experience managing a team
• 6+ years of proven experience with public Cloud environments, specifically AWS.
• Additional Cloud computing experience with Azure, GCP, and Containerization is a plus.
• Experience with Wiz.
• Understanding of Terraform, CI/CD and deployment architectures.
• Experience with vulnerability management, SIEM, compliance to security baselines, and Identity and Access Management in the cloud and on-prem (AD, Ping, ADFS, etc.) preferred.
• Familiarity with industry standards, guidelines, and regulatory compliance requirements related to information security and cloud computing (NIST 800-53, ISO-27001, etc.).
• Experience with delivering reliable, available, and high-performance enterprise-scale solutions.
• Programming experience one or more of the following languages: Python, C#, C++, PowerShell, Bash, Terraform, and SQL as well as experience with GIT version control (GITFlow, GitHub, BitBucket, etc.)
• One or more of the following certificates: Cloud (AWS, Azure, Google Cloud Platform), CISSP preferred.

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.