Cloud Security Engineer - Data Protection & Infrastructure Security - Boston

Daily Responsibilities

• Harden and secure cloud infrastructure using security best practices and baseline standards
• Develop automated solutions that identify and remediate cloud configuration risks
• Implement controls that protect sensitive financial, operational, and client data
• Perform security assessments of cloud resources and enterprise platforms
• Partner with engineering teams to strengthen infrastructure security across cloud environments
• Support encryption, key management, and data protection initiatives
• Monitor cloud environments for risky configurations and compliance gaps
• Create automation scripts that improve operational efficiency and security visibility
• Manage security findings from cloud assessments and coordinate remediation activities
• Create technical documentation, security standards, and implementation procedures

About the Role

The Cloud Security Engineer will play a crucial role in protecting the organization’s cloud-hosted data ecosystems, ensuring the security of sensitive financial information, and implementing robust infrastructure security controls.

Responsibilities

• Focus on securing cloud-hosted data ecosystems, safeguarding sensitive financial information, and implementing infrastructure security controls
• Partners with teams responsible for cloud operations, enterprise data platforms, analytics environments, and infrastructure engineering to ensure security is built into the foundation of critical systems
• Assess cloud environments for security weaknesses, develop automated remediation solutions, improve security visibility, and help establish technical controls that protect confidential client and investment data
• Work with internal stakeholders to strengthen secure configurations, reduce attack surfaces, and continuously improve the organization's cloud security maturity

Requirements

• Strong experience with AWS, Azure, or multi-cloud security
• Experience securing cloud infrastructure and core platform services
• Knowledge of cloud configuration management and hardening standards
• Experience with cloud security posture management (CSPM) tools
• Understanding of encryption technologies and key management systems
• Experience with vulnerability scanning and remediation programs
• Experience with networking fundamentals, DNS, VPNs, and firewalls
• Proficiency with Infrastructure as Code tools such as Terraform
• Experience implementing security controls for enterprise data environments

Qualifications

• 8+ years of cloud security or infrastructure security experience
• Familiarity with data loss prevention (DLP) technologies
• Experience securing cloud-based analytics or data lake environments
• Experience supporting large enterprise infrastructure environments
• AWS Security Specialty, Azure Security Engineer, CISSP, or similar certifications
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field

Skills

• Strong experience with AWS, Azure, or multi-cloud security
• Experience securing cloud infrastructure and core platform services
• Knowledge of cloud configuration management and hardening standards
• Experience with cloud security posture management (CSPM) tools
• Understanding of encryption technologies and key management systems
• Experience with vulnerability scanning and remediation programs
• Experience with networking fundamentals, DNS, VPNs, and firewalls
• Proficiency with Infrastructure as Code tools such as Terraform
• Experience implementing security controls for enterprise data environments

Benefits

• Medical Insurance
• Dental Benefits
• Vision Benefits
• Paid Time Off (PTO)
• 401(k) (including match, if applicable)