Senior Cloud Security Engineer - InfoSec

Mercury; San Francisco (CA); On-site; USD 167,000 - 208,000; Full time

Job summary

Mercury is seeking a Cloud Security Engineer to design systems, guardrails, and automation that scale securely. You will partner with cross-functional teams to enforce cloud security, governance, and privacy controls while enabling rapid engineering velocity.

The ideal candidate brings 5+ years in cloud security, a solid grasp of security frameworks, and demonstrated problem-solving under pressure. AWS know-how and IaC tooling familiarity are highly valued as we advance in a remote-first,

Qualifications

• 5+ years relevant experience in cloud security, networking, information security, or related fields.
• Strong desire to learn and grow with a proven track record.
• Familiarity with security frameworks and privacy regulations (NIST CSF, FFIEC, SOX, SOC2, GLBA, ISO27018, PCI-DSS).
• Deep problem-solving and analytical skills under pressure.
• Fundamental understanding of security practices, troubleshooting, attack vectors, and customer support.
• Familiarity with information as code (IaC) tooling.
• AWS certifications are encouraged.

Responsibilities

• Help build and define cloud security posture. Enable cyber resilience. Help with zero trust initiatives.
• Understand Governance, Risk and Compliance as it relates to cloud engineering
• Collaborate with infrastructure and engineering teams to improve reliability and security of our cloud infrastructure
• Automate cloud security controls to minimize threats, vulnerabilities, and risk
• Shape Mercury's AWS cloud architecture around resilience, least privilege, and long-term maintainability
• Address remote access challenges in a remote-first environment
• Address security concerns in the cloud with teams and stakeholders

Skills

Cloud security

Networking

Information security

GRC

IaC tooling

AWS certifications

Job description

Medieval cathedral builders understood that the flying buttress wasn't the building. Visitors came to admire the stained glass and soaring ceilings, not the stone supports outside. But without those supports, none of the beauty could stand.

Cloud security plays a similar role at Mercury. Our customers come for products that feel remarkably simple. Behind that simplicity is an infrastructure that quietly protects billions of dollars, preserves customer trust, and gives engineers the confidence to move quickly. We're looking for a Cloud Security Engineer who enjoys building those invisible supports.

Protecting our customers’ security and privacy is a top priority. We're all about using the latest technology to do things smarter. That's why we need a Cloud Security Engineer. This person will be our go-to for designing the systems, guardrails, and automation that allow Mercury to scale without compromising security or slowing down engineering. The ideal candidate should be ready and willing to come up with innovative solutions leveraging the newest technologies to address the unique problems they encounter. We work with teams across the enterprise to solve security, privacy, and compliance challenges so be ready to collaborate.

Come be a part of helping us stay safe and maintain trust with our customers!

As we gear up for the next stages of Mercury's growth, you will:

• Help build and define cloud security posture. Enable cyber resilience. Help with zero trust initiatives.
• Have an understanding of Governance, Risk and Compliance as it relates to cloud engineering
• Work with the infrastructure and other engineering teams to improve the overall reliability and security of our cloud infrastructure
• Automate cloud security controls to ensure threats, vulnerabilities, and risk are minimized
• Shape Mercury's AWS cloud architecture around resilience, least privilege, and long-term maintainability
• Work with teams throughout Mercury to address remote access challenges in a remote-first environment
• Work with teams and stakeholders throughout Mercury to address security concerns in the cloud.

The ideal candidate should have:

• 5+ years relevant experience in cloud security, networking, information security, or other relevant fields.
• A strong desire to learn and grow and proven track record of doing so.
• Familiarity with standard security frameworks and privacy regulations (NIST CSF, FFIEC, SOX, SOC2, GLBA, ISO27018, PCI-DSS, etc.)
• Deep problem-solving and analytical skills, and poise and ability to act calmly and competently in high‑pressure, high‑stress situations.
• A fundamental understanding of accepted security practices, troubleshooting issues, attack vectors, and customer support.
• Familiarity with information as code (IaC) tooling.
• AWS certifications are encouraged.

If this role interests you, we invite you to explore our public demo at demo.mercury.com.

The total rewards package at Mercury includes base salary, equity (stock options/RSUs), and benefits. Our salary and equity ranges are highly competitive within the SaaS and fintech industry and are updated regularly using the most reliable compensation survey data for our industry. New hire offers are made based on a candidate’s experience, expertise, geographic location, and internal pay equity relative to peers.

Our target new hire base salary ranges for this role are the following:

• US employees (any location): $166,600 - $208,300
• Canadian employees (any location): CAD 157,400 - 196,800

*Mercury is a fintech company, not an FDIC‑insured bank. Banking services provided through Choice Financial Group and Column N.A., Members FDIC.

Mercury values diversity & belonging and is proud to be an Equal Employment Opportunity employer. All individuals seeking employment at Mercury are considered without regard to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, sexual orientation, or any other legally protected characteristic. We are committed to providing reasonable accommodations throughout the recruitment process for applicants with disabilities or special needs. If you need assistance, or an accommodation, please let your recruiter know once you are contacted about a role.