SaaS Cloud Security Lead & DevSecOps Architect

Ally; Charlotte (NC); Hybrid; USD 110,000 - 180,000; Full time

Benefits offered by this job

401K with company match

Tuition reimbursement

Employee stock purchase plan

Job summary

Ally is seeking a Cloud Security Principal Engineer to join the Information Protection and Risk Management team in the US. You will design and implement security controls for SaaS and cloud platforms, maturing governance, tooling, and processes while collaborating with security and engineering teams.

The role focuses on cloud security, CSPM operations, and DevSecOps, with potential long-term engagement to advance Ally’s cloud security services and application security initiatives.

Qualifications

• 7+ years of information security experience.
• Bachelor’s Degree in relevant field(s) or equivalent.
• Demonstrated technical expertise in two or more technology areas (compute, storage, network, data, etc).
• Experience as a software developer with automation, Infrastructure as Code and DevOps + CI/CD
• Strong programming skills in Python, Terraform, and frameworks like TensorFlow and PyTorch.
• 5+ years of information security practices, controls, and governance (CISSP preferred).
• 4+ years of experience with cloud platforms (AWS, Azure, GCP).
• OWASP Top 10, LLM and AI Security knowledge.

Responsibilities

• Support existing cloud security infrastructure and security projects, with potential to take on other technologies (DevOps toolchain, Cloud automation, SaaS posture management, AI).
• Define and mature cloud-focused security policies and controls (governance, processes, frameworks, metrics).
• Manage day-to-day troubleshooting of the enterprise CSPM platform and other security controls (configuration tuning, escalation criteria).
• Work with Security teams to tune control systems to meet business needs; identify security risks and drive remediation with the IPRM team.
• Perform architecture and engineering responsibilities in support of existing technologies and new security projects.
• Perform daily, weekly and monthly health checks, user activity audits and determine baseline offsets.
• Identify, implement and operationalize security technologies and processes to improve visibility and reduce risk.
• Partner with technical leaders to mature Ally’s cloud security posture and application security capabilities.
• Consult with project teams to ensure platform architecture has proper security controls (Cloud Providers / SaaS engagements).
• Cloud Platform Security and DevSecOps / Pipeline Security.

Skills

Cloud security

Python

Terraform

DevSecOps

CISSP

CI/CD

TensorFlow

PyTorch

AWS

Azure

GCP

OWASP Top 10

Automation

Education

Bachelor’s Degree in relevant field(s) of study or equivalent

Job description

Ally is seeking a Cloud Security Principal Engineer to join the Information Protection and Risk Management team in the US. You will design and implement security controls for SaaS and cloud platforms, maturing governance, tooling, and processes while collaborating with security and engineering teams.

The role focuses on cloud security, CSPM operations, and DevSecOps, with potential long-term engagement to advance Ally’s cloud security services and application security initiatives.