Senior Cloud Security & DevSecOps Engineer

Pretium Enterprise Services, LLC; Scottsdale (AZ); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

401(k) plan with employer match

Health, dental, vision and life insu r

Job summary

Pretium Enterprise Services, LLC is seeking a Senior Cloud Security and DevSecOps Engineer to own cloud security engineering across PES operating companies. Hybrid work three days a week in Scottsdale, with candidates willing to travel to Dallas, Charlotte, or California as needed.

You will assess AWS and Azure, establish guardrails, implement IaC/policy as code, and integrate security into CI/CD. The role focuses on risk reduction, telemetry, and secure software delivery across multiple teams.

Qualifications

• Bachelor's degree in CS, cybersecurity, or related field.
• Deep security expertise in AWS or Azure and practical production experience in the other.
• Experience with organizational guardrails, networking, logging, encryption and workload permissions.
• Hands-on experience in CI/CD security scanning and remediation.
• Strong scripting and API integration skills (Python or PowerShell).

Responsibilities

• Assess existing AWS and Azure environments, prioritize inherited security gaps, and deliver a phased remediation roadmap.
• Establish reusable baselines and onboarding standards across supported operating companies.
• Build and maintain organization-level guardrails through AWS Organizations and Azure management groups, using infrastructure as code and policy as code.
• Integrate cloud security tooling into CI/CD; tune rules and validate findings and exploitability.
• Embed security throughout the software development lifecycle through threat modeling and architecture, API and data-flow reviews.
• Partner with data teams to secure Snowflake and Palantir service identities, integrations and pipelines.

Skills

Cloud security

DevSecOps

Threat modeling

Scripting (Python/PowerShell)

CI/CD security tooling

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Security, Computer Engineering, Software Engineering, or Information Technology

Tools

Terraform

CloudFormation

Bicep

GitHub Actions

GitLab CI/CD

Azure DevOps

Aikido

SAST

DAST

SCA

Snowflake

Palantir

AWS Organizations

Azure management groups

Kubernetes

Job description

Why Pretium Enterprise Services

With expert business service capabilities, Pretium Enterprise Services ("PES"), is integral to the growth, innovation, and transformation of its global operating companies. Partnering with internal and external businesses and stakeholders to rapidly unlock value for its customers, PES delivers with excellence and ownership, enabling scalable growth.

Job Overview

Pretium Enterprise Services is seeking a Senior Cloud Security and DevSecOps Engineer to own cloud security engineering across the operating companies PES supports. Your first priority is to assess and strengthen existing AWS and Azure environments, then embed preventive controls into infrastructure and software delivery and extend those patterns to additional operating companies. This hands-on role partners with infrastructure, development, identity and AI security teams to implement production controls and drive remediation through verified closure.

This role is hybrid three days a week in our office located in Scottsdale, Arizona (preferred location). Other locations that will considered: Dallas, Texas; Charlotte, North Carolina and California.

What You'll Do

Assess existing AWS and Azure environments, prioritize inherited security gaps, and deliver a phased remediation roadmap. Establish reusable baselines and onboarding standards across supported operating companies. Build and maintain organization-level guardrails through AWS Organizations and Azure management groups, using infrastructure as code and policy as code. Test changes, stage deployments, detect configuration drift, and validate ongoing effectiveness. Identify cloud misconfigurations, exposed services and excessive workload permissions. Implement fixes within your ownership and drive other changes through infrastructure and application owners, verifying closure. Establish cloud controls for network exposure, encryption, secrets and audit logging; partner with security operations to validate telemetry coverage and support investigations. Implement least-privilege workload permissions, service-to-service access and secrets controls aligned with identity standards. Jointly review privileged cloud access with the identity team, which owns workforce identity, lifecycle and IGA. Embed security throughout the software development lifecycle through threat modeling and architecture, API and data-flow reviews. Review application and infrastructure code and help developers implement practical fixes. Implement and maintain application security tooling, including Aikido and SAST, DAST and SCA capabilities. Integrate code, dependency, secrets, container and infrastructure scanning into CI/CD; tune rules and validate findings and exploitability. Build reusable pipeline templates and risk-based release gates; secure build systems, deployment credentials and artifacts, with provenance and software bill of materials controls where appropriate. Drive adoption of common controls across independent engineering teams. Track coverage and remediation outcomes, document justified exceptions for approval, and turn recurring issues into preventive controls. Partner with data teams to secure Snowflake and Palantir service identities, integrations and pipelines, aligning permissions with approved identity standards. Partner with the AI Security Engineer to implement cloud, pipeline and workload controls for AI-enabled applications and agents. Build and operate maintainable security automation and runbooks, including testing, error handling, failure monitoring, documentation and safe rollback.

Who We Are Looking For

Demonstrated ownership of production cloud security and DevSecOps controls, including improvements you personally designed, implemented and operated. Ability to take ambiguous problems through assessment, delivery and verified closure with limited direction. Bachelor's Degree in Computer Science, Cybersecurity, Information Security, Computer Engineering, Software Engineering, or Information Technology Deep security expertise in AWS or Azure and practical production experience in the other, with the ability to deliver security improvements across both. Experience with organizational guardrails, networking, logging, encryption and workload permissions. Proven experience assessing existing cloud environments, prioritizing exposures, and driving remediation through verified closure with infrastructure and development teams. Hands-on experience implementing and tuning security scanning in CI/CD, validating findings, reviewing application code and helping developers implement fixes. Strong grounding in threat modeling, API security, authentication and authorization. Strong scripting and API integration skills, such as Python or PowerShell, demonstrated through production automation with testing, error handling, monitoring, documentation and safe rollback. Ability to author, review, test and deploy infrastructure and policy changes through version-controlled workflows, using tools such as Terraform, Bicep or CloudFormation and GitHub Actions, GitLab CI/CD or Azure DevOps. Ability to explain risk and operational tradeoffs, agree remediation priorities, and secure adoption of controls across teams without direct reporting authority.

Preferred qualifications

Experience in multi-company, shared-services or managed-services environments; Snowflake or Palantir security; Wiz; containers, Kubernetes or serverless security; and software supply chain controls. Prior software development experience and relevant cloud or security certifications are welcome.

What We Offer

This position offers the opportunity to join a collegial, entrepreneurial firm committed to the personal and professional growth of its team members and to maintaining a positive, encouraging work environment where people enjoy working together. The company offers a comprehensive benefits and perks package, including:

• 401(k) plan with an employer match
• Health, dental, vision and life insurance
• Paid Time Off (PTO)
• 11 firm holidays
• Hybrid office/work from home arrangement
• Annual year-end bonus eligible

Pretium Enterprise Services is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment regardless of race, color, religion, gender, gender identity or expression, genetic information, marital status, sexual orientation, national origin, disability, age, veteran status, or any other characteristic protected by federal, state, or local law.

With expert business service capabilities, Pretium Enterprise Services ("PES"), was integral to the growth, innovation, and transformation of Pretium’s global operating companies. Partnering with internal and external businesses and stakeholders to rapidly unlock value for our customers, PES delivers with excellence and ownership, enabling scalable growth.