Lead Cloud Security Engineer - Tooling & CI/CD

Elsevier; Philadelphia (Philadelphia County); On-site; USD 140,000 - 170,000; Full time

Job summary

Elsevier, within the Information Security & Data Protection department, seeks a Senior Security Engineer to design, build, and operate security tooling at scale. You will own architecture decisions for cloud security platforms, guide engineers through code and design reviews, and partner with Incident Response, Threat Engineering, and GRC.

You will champion secure-by-default practices, drive IaC and CI/CD improvements, and help translate threats into engineering roadmaps while leveraging

Qualifications

• Hands-on security engineering experience at scale in the cloud.
• Ownership of security architecture in multi-account AWS environments.
• Proficiency with Terraform and infrastructure as code standards.
• Experience designing CI/CD pipelines for reliability and security.
• Broad experience across SIEM, EDR, DLP, PAM, WAF, SOAR, and vulnerability mgmt.
• Mentoring engineers and guiding security design decisions.
• Strong Python scripting and production-service experience on Kubernetes/EKS.
• Practical use of AI-assisted engineering tools in workflows.

Responsibilities

• Leading design, architecture, and delivery of security platforms and services.
• Owning and evolving IaC standards (Terraform) and CI/CD (GitHub Actions).
• Providing technical leadership and mentorship to engineers.
• Driving integration, tuning, and lifecycle management of core security tooling.
• Partnering with IR, Threat Engineering, and GRC to map threats to engineering roadmaps.
• Championing AI-assisted engineering practices to improve velocity and quality.
• Leading troubleshooting and root-cause analysis for tooling incidents.
• Representing SENG in architecture reviews and secure-by-design discussions.
• Delivering production-ready systems on time and within budget.

Skills

Security engineering

Cloud security

AWS architecture

Infrastructure as Code

Mentoring

Leadership

Python

Kubernetes/EKS

CI/CD

Education

Bachelor's degree or equivalent

Tools

Terraform

GitHub Actions

Kubernetes

GitHub Copilot

Claude Code

Job description

Elsevier, within the Information Security & Data Protection department, seeks a Senior Security Engineer to design, build, and operate security tooling at scale. You will own architecture decisions for cloud security platforms, guide engineers through code and design reviews, and partner with Incident Response, Threat Engineering, and GRC.

You will champion secure-by-default practices, drive IaC and CI/CD improvements, and help translate threats into engineering roadmaps while leveraging