Security Engineering Lead – Cloud, AppSec & IAM

SmartBiz; Northbrook (IL); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Equity participation

Medical, dental, vision, life, andDis/

Flexible vacation policy

Job summary

SmartBiz Bank in the United States is seeking an experienced Security Engineering Manager to lead our security engineering function and define the company’s security strategy. This is a hands-on individual contributor role reporting to the Director of DevOps and IT, and it will involve close collaboration with the CTO to drive security across cloud, applications, and infrastructure.

This role emphasizes threat modeling, IAM, cloud security, incident response, and secure SDLC, with cross‑team

Qualifications

• 8+ years of experience in information security/security engineering.
• Experience owning or influencing a security program in a regulated environment.
• Strong AWS/cloud security knowledge.
• Experience securing Kubernetes/containerized environments.
• Deep understanding of IAM, encryption, secrets management and cloud security.
• Strong AppSec and secure-SDLC experience.
• Experience with SIEM, telemetry, detection and incident response.
• Familiarity with Infrastructure as Code and CI/CD security.
• Experience in regulated financial services and familiarity with NIST CSF, CIS Controls, FFIEC guidance and GLBA.
• Excellent communication skills for executives.

Responsibilities

• Define and execute the security engineering strategy and roadmap with CTO and Director of DevOps.
• Lead security architecture across cloud, applications, identity, endpoints, and developer platforms.
• Design and improve preventive and detective controls in the cloud environment.
• Prioritize initiatives based on risk, impact, and resources to maximize security posture.
• Build partnerships across Engineering, DevOps, IT, Risk, and Compliance.
• Mature application security practices including threat modeling, design reviews, SAST/DAST/SCA, and remediation.
• Own vulnerability management across apps, cloud infra, containers, and third-party software.
• Strengthen identity and access security, least privilege, and secrets management.
• Develop security monitoring, logging, detection, and incident response capabilities.
• Lead security incident response, containment, and root-cause analysis.
• Perform security architecture reviews for new initiatives and vendors.
• Establish practical security standards and guardrails for secure delivery.
• Support regulatory examinations and translate requirements into technical controls.
• Develop security metrics and communicate risks and roadmap progress to stakeholders.
• Build security documentation and playbooks; foster security awareness across the org.

Skills

Security engineering

AWS/cloud security

Kubernetes security

AppSec / secure-SDLC

SIEM / incident response

Infrastructure as Code

Tools

Terraform

Job description

SmartBiz Bank in the United States is seeking an experienced Security Engineering Manager to lead our security engineering function and define the company’s security strategy. This is a hands-on individual contributor role reporting to the Director of DevOps and IT, and it will involve close collaboration with the CTO to drive security across cloud, applications, and infrastructure.

This role emphasizes threat modeling, IAM, cloud security, incident response, and secure SDLC, with cross‑team