Senior Cloud Security Engineer — Build Resilient Guardrails

Mercury; New York (NY); On-site; USD 167,000 - 208,000; Full time

Job summary

Mercury is seeking a Cloud Security Engineer to design and implement guardrails, automation, and resilient cloud patterns across our AWS environment. You will partner with infrastructure and engineering teams to lock down access, reduce risk, and scale security without slowing product development.

You should bring 5+ years in cloud/security, familiarity with standard frameworks, IaC tooling, and a mindset for innovation in a remote-first, fast-growing fintech environment.

Qualifications

• 5+ years of experience in cloud security, networking, information security, or related fields.
• Strong desire to learn and grow with a proven track record.
• Familiarity with security frameworks and privacy regulations (e.g., NIST CSF, SOC2, ISO27018, PCI-DSS).
• Deep problem-solving, analytical skills, and ability to perform under pressure.
• Fundamental understanding of security practices, troubleshooting, attack vectors, and customer support.
• Familiarity with information as code (IaC) tooling.
• AWS certifications are encouraged.

Responsibilities

• Help build and define cloud security posture and enable cyber resilience.
• Understand Governance, Risk and Compliance as it relates to cloud engineering.
• Collaborate with infrastructure and engineering teams to improve reliability and security of cloud infrastructure.
• Automate cloud security controls to minimize threats and risk.
• Shape Mercury's AWS cloud architecture around resilience and least privilege.

Skills

Cloud security experience

Networking

Information security

IaC tooling

AWS certifications encouraged

Job description

Mercury is seeking a Cloud Security Engineer to design and implement guardrails, automation, and resilient cloud patterns across our AWS environment. You will partner with infrastructure and engineering teams to lock down access, reduce risk, and scale security without slowing product development.

You should bring 5+ years in cloud/security, familiarity with standard frameworks, IaC tooling, and a mindset for innovation in a remote-first, fast-growing fintech environment.