Sr Cloud Security Engineer

Job Title: Cloud Security Engineer (DevSecOps)
Location: Irvine, CA / San Antonio, TX / New York (Onsite Local Preferred)
Type: Contract

We are seeking a highly skilled Cloud Security Engineering with DevSecOps experiences to join our cybersecurity team within a leading financial / wealth management firm. This role is pivotal in embedding security into our cloud infrastructure and CI/CD pipelines, ensuring secure and compliant deployment of applications across Multi-Cloud environments (AWS, Azure, Google Cloud Platform).

You will work closely with cybersecurity leadership, cloud engineering, platform engineering and development teams to design, implement, and maintain secure DevOps practices that align with regulatory and business requirements.

Required:

• 15+ years of experience in Cloud Security Engineering & DevSecOps, Cloud Security, or a related field.
• Strong hands-on experience with AWS and/or Azure security services.
• Proficiency in Python for scripting and automation.
• Experience with CI/CD tools such as Harness, or similar.
• Solid understanding of container security (e.g., Docker, Kubernetes).
• Familiarity with security frameworks such as NIST, CIS Benchmarks, or ISO 27001.

Key Responsibilities

• Develop Cloud Security Runbooks (aka blueprints) for sanctioned cloud services such as S3, Lambda, RDS, etc..
• Design and implement Cloud Security preventive and detective guardrails using CSPM (Cloud Security Posture Management).
• Design and implement security controls CI/CD pipelines using tools such as Harness, and GitHub.
• Develop and maintain Infrastructure as Code (IaC) using Terraform and AWS CloudFormation.
• Integrate security controls and automated testing into the software development lifecycle (SDLC).
• Collaborate with cloud engineers to ensure secure deployment and configuration of services in AWS and Azure.
• Write and maintain automation scripts in Python to support security monitoring, compliance, and remediation.
• Conduct security reviews, and vulnerability assessments of cloud services and cloud-native applications.
• Monitor and respond to security events and alerts related to cloud infrastructure and DevOps pipelines.
• Stay current with emerging threats, vulnerabilities, and compliance requirements relevant to financial services.

Preferred:

• Experience in a regulated industry, preferably financial services or wealth management.
• Experience with JIRA, PowerBI