Senior Cloud Security Engineer

Arrowstreet Capital, Limited Partnership; Boston (MA); On-site; USD 110,000 - 315,000; Full time

Job summary

Arrowstreet Capital is seeking a Senior Cloud Security Engineer to guide cloud security strategy and hands-on implementation in a dynamic DevSecOps environment. You will lead security across AWS cloud services, influence architecture decisions and automate controls with a focus on collaboration with engineering teams.

The ideal candidate has deep AWS security experience, proficiency in cloud-native tooling, Terraform and Python, and a proven track record delivering robust security postures for

Qualifications

• Proven record of securing AWS cloud tenants using cloud-native, open source and commercial solutions.
• Experience with AWS security tools and concepts (SCP, KMS, GuardDuty, SecurityHub, IAM, VPCE).
• Strong CloudFormation and Python knowledge with Boto3.

Responsibilities

• Drive, implement and support AWS cloud cybersecurity strategy for Arrowstreet.
• Design, deliver and operate cybersecurity controls for new cloud services.
• Continuously assess cybersecurity risk posture and implement improvements.
• Collaborate with AWS account executives to align cloud solutions with business goals.
• Integrate security with AWS cloud designs and other platforms to support workloads.
• Provide advanced AWS cybersecurity expertise for design, engineering and operations.
• Participate in deep cloud architecture discussions to ensure security visibility.
• Educate project teams and leaders on cloud cybersecurity outcomes and direction.
• Facilitate strategic decision making through analysis and justifications.
• Recommend enhancements to tooling and services within cloud environments.
• Participate in a CSIRT rotation.

Skills

AWS Security

CloudFormation

Python (Boto3)

Kubernetes

CI/CD Security

Vulnerability management

Education

Bachelor's in Computer Science

Tools

SCP

KMS

GuardDuty

SecurityHub

IAM

Macie

Inspector

Terraform

Job description

Job Overview

We are seeking a highly skilled and motivated Senior Cloud Security Engineer to join our cybersecurity team, with a focus on guiding cloud security strategy and implementation in a dynamic "DevSecOps" environment. In this role, you will be responsible for setting the vision and ensuring the security of all cloud services implementations through both technical leadership and hands‑on engineering. The ideal candidate will possess excellent communication and leadership skills, and demonstrate extensive experience in AWS cloud security—including cloud‑native security controls, integration and automation, and stakeholder management. You will have a strong background in AWS cloud security and an in-depth understanding of many common native AWS security services and controls, adept at building integrations with common AWS services through API frameworks and Platform Automation Development.

Responsibilities

• Drive, implement, contribute and support/operate AWS cloud cybersecurity strategy for Arrowstreet.
• Leveraging automations; design, drive, deliver and operate cybersecurity controls necessary for each new cloud services that will be deployed within our cloud tenants.
• Continuous assessment of our cybersecurity risk posture and implement/operate necessary improvements.
• Collaborate with AWS account executives to align their cloud solutions and recommendations with Arrowstreet’s business goals, security standards, and technology roadmap.
• Collaborative approach with network engineering, systems engineering and cloud engineering teams to integrate security with AWS cloud designs, initiatives and controls and other platforms or workflows that ultimately support cloud workloads.
• Provides exceptional AWS cybersecurity expertise at a very technical level focused on design, engineering and operational support towards the successful delivery of services.
• Participate in deep cloud architectural discussions and drive topics, directions and problem‑solving outcomes to ensure solutions are designed for successful security controls and visibility.
• Educate and coach project team members, sponsors, and functional leaders on cloud cybersecurity aspects and outcomes, influence change/direction as needed.
• Facilitate and advance high level strategic decision making through detailed analysis and technical justifications.
• Recommend new or provide enhancements of existing cybersecurity tooling and services within cloud environments.
• Partake in a team rotation of CSIRT responsibilities.

Qualifications

• Proven record of similar experience of securing AWS cloud tenants using both cloud native, open source and commercial based security solutions.
• Strong experience with these AWS Security tools/concepts: SCP, KMS, GuardDuty, SecurityHub, IAM and Condition, VPCE and VPCE policies, Macie, Inspector.
• Strong CloudFormation and Python knowledge with Boto3 library and others.
• Experience with securing Containers, Kubernetes stacks, Pipelines (SDLC).
• Experience with endpoint detection and response implementations.
• Experience with runtime detection and prevention capabilities.
• Experience with vulnerability management for cloud workloads and how to operate them.
• Passion for technology, a willingness to learn new skills and the ability to evangelize.
• Self‑motivated and self‑directed, ability to translate technical direction into functional solutions.
• Ability to work effectively, managing multiple priorities while collaborating with cross‑functional teams.
• Proven ability to investigate complex issues spanning multiple technologies and drive to completion.
• Understanding of micro‑system environments is an added plus; EKS, ECS etc.
• Excellent written, oral, and presentation skills, with the ability to explain technical concepts to non‑technical senior stakeholders and drive organizational alignment.
• Degree in Computer Science or related field.
• Nice to have Terraform or similar framework automation is an added plus.
• Routing and switching / networking experience is an added plus.
• Terraform or similar framework automation is an added plus.
• Routing and switching / networking experience is an added plus.

The base salary range for this position is $110,000 to $315,000 per year.

Arrowstreet Capital operates a robust talent acquisition program, and we also seek to compensate and reward our employees competitively within our industry and in line with our merit‑based culture. Our approach to total compensation includes base salaries and annual discretionary bonuses, as well as a robust benefits package. The determination of a successful candidate’s base salary placement within the listed range will vary based on the candidate’s relevant experience and qualifications (which may also include relevant certifications, credentials and other education), the job responsibilities and scope, the commensurate resulting level of the position and other relevant factors. The listed range is also an estimate, and additional information regarding base salary and other elements of total compensation offered by Arrowstreet Capital to successful applicants will be communicated during the recruitment process.

Arrowstreet Capital is a Boston‑based systematic investment firm that manages global equity portfolios for institutional investors around the world.

All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, ancestry, genetic information, age, pregnancy, medical condition, disability, veteran or military status, marital status or any other characteristic protected by federal, state, or local law.

Arrowstreet Capital is committed to working with and providing reasonable accommodations for qualified individuals with disabilities and disabled veterans. If you need a reasonable accommodation for any part of the employment process due to a disability, contact us to discuss the nature of your request and contact information.

Arrowstreet Capital is a Boston‑based systematic investment firm that manages global equity portfolios for institutional investors around the world.

All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, ancestry, genetic information, age, pregnancy, medical condition, disability, veteran or military status, marital status or any other characteristic protected by federal, state, or local law.

Arrowstreet is an equal opportunity employer.

Arrowstreet Capital is committed to working with and providing reasonable accommodations for qualified individuals with disabilities and disabled veterans. If you need a reasonable accommodation for any part of the employment process due to a disability, contact us to discuss the nature of your request and contact information.