Senior Cloud Security Engineer: AWS, CI/CD & IAM Focus

Beyond Finance; Chicago (IL); On-site; USD 140,000 - 165,000; Full time

Benefits offered by this job

Health, dental, and vision programs

PTO, paid holidays, and parental leave

401(k) matching

Job summary

Beyond Finance in the United States is seeking a Senior Security Engineer to harden our AWS environment and CI/CD pipelines, focusing on Wiz-based vulnerability management and secure defaults in infrastructure.

You will partner with DevOps and Engineering to implement preventative controls across IAM, networking, containers, and data exposure, while scaling automation and threat modeling. The role includes a base salary with bonus eligibility and comprehensive benefits.

Qualifications

• 5+ years of hands-on security engineering across cloud security and vulnerability management.
• Strong AWS security background including IAM, networking, containers, logging.
• Hands-on experience securing CI/CD pipelines and Terraform.
• Experience running vulnerability management programs.
• Knowledge of OWASP Top 10 and threat modeling.
• Ability to work independently with minimal oversight.

Responsibilities

• Own cloud security posture across AWS with Wiz and native services.
• Establish secure defaults in infrastructure as code.
• Harden CI/CD pipelines in collaboration with DevOps.
• Manage vulnerability intake, prioritization, and remediation with engineering.
• Build scalable automation for data ingestion and developer workflows.
• Instrument telemetry, alerting, and runbooks for owned systems.
• Operate and tune the WAF with rules and rate limiting.

Skills

Cloud security

AWS security

Terraform

CI/CD security

Threat modeling

Independent execution

Tools

Wiz

Cloudflare

GitHub Advanced Security

Spacelift

AWS-native services

WAF management

Job description

Beyond Finance in the United States is seeking a Senior Security Engineer to harden our AWS environment and CI/CD pipelines, focusing on Wiz-based vulnerability management and secure defaults in infrastructure.

You will partner with DevOps and Engineering to implement preventative controls across IAM, networking, containers, and data exposure, while scaling automation and threat modeling. The role includes a base salary with bonus eligibility and comprehensive benefits.