Senior Cloud Security Engineer — GCP & IaC Expert

Technology Resource Management; United States; Hybrid; USD 140,000 - 190,000; Full time

Job summary

TRM Labs is seeking a Senior Cloud Security Engineer to lead security across our cloud infrastructure, shaping strategy and implementing best practices at scale. You will work with engineering, product, and leadership to align security with business goals and drive risk reduction.

You will own IAM in GCP, perform security assessments, contribute to audits, and advance infrastructure security using Terraform and IaC.

Qualifications

• Relevant industry experience managing cloud security programs and IAM
• Expert knowledge of cloud infrastructure components, preferably GCP
• Ability to audit security controls within the cloud environment
• Experience with infrastructure vulnerability testing tools
• Experience with Terraform and cloud-native security solutions

Responsibilities

• Provide technical guidance and leadership as a cybersecurity expert on topics such as architecture, configuration management, and environment design
• Leverage automation tools, configuration management, and IaC to standardize security across all environments
• Guide engineering, product, and leadership to align with security strategies
• Identify and communicate cloud platform vulnerabilities and mitigation options balancing agility and security
• Maintain knowledge of cloud security technologies and assist lines of business to develop secure solutions
• Drive security improvements in the GCP environment and manage IAM to enforce least privilege
• Participate in cloud audits with external and internal stakeholders to ensure compliance

Skills

IAM

Cloud security

Security architecture

Audit & compliance

Tools

Terraform

Heroku

Firewalls

Job description

TRM Labs is seeking a Senior Cloud Security Engineer to lead security across our cloud infrastructure, shaping strategy and implementing best practices at scale. You will work with engineering, product, and leadership to align security with business goals and drive risk reduction.

You will own IAM in GCP, perform security assessments, contribute to audits, and advance infrastructure security using Terraform and IaC.