Multi-Cloud Security Engineering Leader

State Street; Austin (TX); On-site; USD 120,000 - 217,500; Full time

Job summary

State Street is seeking a Head of Cloud Security Engineering to lead a team of cloud security engineers responsible for securing our multi-cloud environments. You will drive security controls, governance, and incident response while directing tooling and policy-as-code initiatives.

You will collaborate with CyberSecurity and Global Technology Services, ensuring security guardrails, service hardening, and compliance with frameworks like NIST 800-53.

Qualifications

• 3+ years leading SRE/DevSecOps or cloud security engineering teams.
• 10+ years of SRE or cloud security engineering in public cloud environments.
• Deep knowledge of AWS or Azure, including security guardrails and service hardening.
• Experience with containers and Kubernetes in AWS/Azure/OCI.
• Experience with NIST 800-53 and CMM compliance frameworks.
• Experience aligning cloud security controls to the MITRE framework.

Responsibilities

• Lead a team of cloud security engineers delivering secure cloud solutions.
• Uplift security controls across multi-cloud environment.
• Oversee cloud service hardening and policy-as-code pipelines.
• Maintain governance hygiene with SOPs and reference architectures.
• Coordinate deployment and management of tooling and controls across clouds.
• Partner with CyberSecurity and Global Technology Services on cross-functional needs.
• Manage audits in Cloud Security Engineering space.
• Audit services for security/configuration issues.
• Mentor engineers and coordinate training to maintain high operational excellence.

Skills

Cloud security leadership

SRE experience

DevSecOps

Cloud security engineering

AWS/Azure knowledge

Kubernetes

Policy-as-code

Cloud security tooling

Tools

Containers

Kubernetes

Wiz

Prisma

Job description

State Street is seeking a Head of Cloud Security Engineering to lead a team of cloud security engineers responsible for securing our multi-cloud environments. You will drive security controls, governance, and incident response while directing tooling and policy-as-code initiatives.

You will collaborate with CyberSecurity and Global Technology Services, ensuring security guardrails, service hardening, and compliance with frameworks like NIST 800-53.