Staff Cloud Security Engineer

NinjaTrader; United States; On-site; USD 110,000 - 221,000; Full time

Job summary

NinjaTrader seeks a Staff Cloud Security Engineer to lead the security of our cloud platform and define the technical direction for secure workloads in GCP. You will shape guardrails, influence architecture decisions, and collaborate across the org to maintain strong security posture.

This hands-on IC role focuses on secure by design systems, incident response, and driving security maturity while partnering with SOC, GRC, and engineering teams.

Qualifications

• 8+ years in security engineering with cloud focus.
• 5+ years securing GCP in production environments.
• Deep hands-on with GCP IAM, VPC, KMS and Security Command Center.
• Experience with Cloudflare WAF, DDoS Protection, Zero Trust, Bot Management and GCP Armor.
• IaC with Terraform and securing CI/CD pipelines.
• Python or Go for automation and tooling.
• Experience in regulated industries with PCI DSS, SOC 2, ISO, SOX.
• Demonstrated technical leadership and influence without authority.

Responsibilities

• Own cloud security architecture across our GCP environments including IAM, VPC controls, and KMS.
• Design edge and application-layer defenses using Cloudflare and Google Cloud Armor.
• Lead threat modeling and security reviews for new services and platform changes.
• Build security guardrails as code through policy-as-code and secure Terraform modules.
• Advance cloud detection and response with SOC and Incident Response teams.
• Serve as senior technical responder during security incidents and post-incident hardening.
• Translate regulatory requirements into scalable technical controls with GRC.
• Mentor senior engineers and raise security maturity.

Skills

Security engineering

Cloud security

Google Cloud Platform

Terraform

CI/CD security

Python/Go

Regulated industries

Technical leadership

Tools

Terraform

Cloudflare

Google Cloud Armor

Job description

JOIN US ON OUR MISSION TO BECOME THE #1 RETAIL TRADING PLATFORM IN THE WORLD

Welcome to the dynamic world of NinjaTrader! As an industry-leading trading platform and futures broker, we're empowering traders to take control of their financial destiny. How do we do it? We provide cutting-edge products and services that enhance the trading journey. Whether a seasoned pro or just starting out, NinjaTrader equips traders with award-winning software and brokerage services to navigate the world's leading financial markets with confidence.

Our growth story is nothing short of exhilarating. Since 2003, NinjaTrader has been dedicated to understanding and supporting traders on their journey toward trading triumph. Through those efforts, our user base has grown to over 2 million users and we have become the number one rated futures brokerage worldwide.

But we're not stopping there. We're constantly evolving, pushing boundaries, and modernizing the futures industry. Our commitment to innovation means users will always have access to dynamic tools, realtime support, and a community of like-minded traders.

So, why work at NinjaTrader? Here, you're not just part of a team; you're part of a movement. We empower employees to reach new heights in their careers by providing a dynamic culture focused on social connection, professional development, and employee recognition initiatives. Sounds too good to be true? Take it from our employees.

Join us as we redefine what's possible in trading, advocate for our customers, and continue our journey toward becoming the world's top retail-focused trading platform in the world.

The team

NinjaTrader is a futures-focused brokerage offering low commissions, award-winning trading platforms, and a suite of customizable tools for active traders. The platform delivers integrated multi-device trading across desktop, web, and mobile, with access to thousands of third-party trading apps and add-ons.

The opportunity

As a Staff Cloud Security Engineer, you are the most senior individual contributor responsible for the security of our cloud platform. You will set the technical direction for how we secure workloads across Google Cloud Platform (GCP), design our edge and perimeter defenses using Cloudflare and Google Cloud Armor, and build the guardrails that enable engineering teams to move quickly without compromising security.

This is a hands-on, high-impact individual contributor role. You will not manage people but will establish engineering standards across the organization, influence company-wide architecture decisions, and serve as the senior technical authority during security reviews and incidents.

In This Role You Will

• Own the cloud security architecture across our GCP environments, including IAM and least privilege design, VPC Service Controls, Organization Policy, Shared VPC, Workload Identity, KMS/encryption, and Security Command Center
• Design, deploy, and tune edge and application-layer defenses using Cloudflare (WAF, DDoS Protection, Zero Trust/Access, Bot Management, Rate Limiting) and Google Cloud Armor (Security Policies, Adaptive Protection, Rate Limiting, and Global Load Balancer integration)
• Lead threat modeling and security architecture reviews for new services and major platform changes while balancing business velocity with security risk
• Build security guardrails as code through policy-as-code, secure Terraform modules, and CI/CD security controls so secure defaults become the path of least resistance
• Advance cloud detection and response capabilities by partnering with the SOC and Incident Response teams on logging pipelines, Chronicle/SIEM detections, and cloud-native alerting
• Serve as a senior technical responder during security incidents, including investigation, containment, remediation, and post-incident hardening
• Partner with GRC and Compliance teams to translate regulatory requirements such as ISO, SOC 2, SOX, and similar frameworks into scalable technical controls and evidence
• Mentor senior and mid-level engineers while raising the overall security maturity of the engineering organization
• Represent Cloud Security during cross-functional planning, architecture reviews, and strategic initiatives

What You Bring

• 8+ years of experience in security engineering, including at least 5 years focused on cloud security in production environments
• Deep hands-on expertise securing Google Cloud Platform environments, including IAM, networking, VPC Service Controls, Security Command Center, KMS, and Organization Policy
• Demonstrated production experience with Cloudflare, including WAF, DDoS Protection, Zero Trust/Access, Bot Management, and Google Cloud Armor
• Strong Infrastructure-as-Code experience using Terraform and securing CI/CD pipelines
• Proficiency in at least one programming or scripting language such as Python or Go for automation and tooling
• Experience securing workloads within regulated industries and familiarity with frameworks such as PCI DSS, SOC 2, ISO, SOX, or similar
• Demonstrated technical leadership and the ability to influence engineering teams without direct authority

Nice to haves

• Google Professional Cloud Security Engineer, CISSP, GCP Professional Cloud Architect, or similar certifications
• Experience securing GKE/Kubernetes environments and container or software supply chain security
• Multi-cloud experience across AWS and Azure
• Experience building detection engineering or threat hunting programs
• Previous experience in fintech, payments, trading, or other highly regulated financial environments

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace.

Compensation Range: $110.4K - $220.8K