Cloud Security Principal Engineer

About the role

The Cloud Security Principal Engineer position at Ally is a member of the Information Protection and Risk Management team and works closely with other members of the IPRM program to identify, manage, and mitigate security risks at Ally. The engineer is part of a broader team of security engineers reporting to the Sr. Director, Cloud Security who are responsible for developing, deploying, and integrating technical controls and tools to meet specific security requirements, as well as defining processes and standards to ensure that security configurations and tools are maintained. This is a project-focused resource within the organization and will focus on designing and implementing both technologies and governance processes focused on our SaaS platforms. This resource will have potential opportunity to transition into a longer-term engagement to continue to mature and improve the SaaS security service.

Responsibilities

• Define and mature cloud-focused security policies and controls (governance, processes, frameworks, metrics)
• Manage the day-to-day troubleshooting of the enterprise CSPM platform and other security controls, including configuration tuning, troubleshooting, and defining and executing escalation criteria
• Work with Security teams to tune control systems to best meet the needs of the business
• Identify security risks and work with the IPRM team to report and lead remediation efforts
• Perform architecture and engineering responsibilities in support of existing technologies and new security projects
• Perform daily, weekly, and monthly health checks, user activity audits, and determine baseline offsets
• Identify, implement, and operationalize security technologies and processes to improve visibility and reduce risk
• Partner with other technical leaders throughout the organization to refine and mature Ally’s security posture for cloud-based technologies and platforms, as well as identifying and maturing application security capabilities
• Consult with project teams to ensure platform architecture has proper security controls in place (focused on Cloud Providers / SaaS engagements)
• Support Cloud Platform Security and DevSecOps / Pipeline Security

Qualifications

• Minimum Qualifications
  • 7+ years of relevant experience
  • Bachelor’s Degree in relevant field(s) of study or equivalent
• Preferred Qualifications
  • Demonstrated technical expertise in two or more technology areas (compute, storage, network, data, etc)
  • Experience as a software developer with knowledge of automation, Infrastructure as Code and DevOps + CI/CD tools and processes
  • Strong programming skills in Python, Terraform, and experience in frameworks like TensorFlow, PyTorch
  • 5+ years of experience in information security practices, controls, and governance (CISSP preferred)
  • 5+ years of experience as a technical resource within an IT organization (enterprise / matrixed organization preferred)
  • 4+ years of experience with cloud platforms (operational experience preferred for AWS, Azure, GCP, etc)
  • Demonstrate technical expertise/working knowledge of OWASP Top 10, LLM and AI Security
  • Ability to build partnerships, translate complexities into simple terms, and maintain focus on objectives

Benefits

• Time Away: 20 paid time off days plus 11 paid holidays and 8 hours of volunteer time off yearly (prorated based on start date and program varies based on full or part-time status and management level)
• Planning for the Future: 401K retirement savings plan with matching and company contributions, student loan paydowns, 529 educational savings assistance programs, tuition reimbursement, employee stock purchase plan, financial learning center and financial coach access
• Supporting your Health & Well-being: flexible health and insurance options including medical, dental and vision, employee, spouse and child life insurance, short- and long-term disability, pre-tax Health Savings Account with employer contributions, Healthcare FSA, critical illness, accident & hospital indemnity insurance, and a total well-being program
• Building a Family: adoption, surrogacy and fertility assistance, paid parental and caregiver leave, Dependent Day Care FSA, backup child and adult/elder care days and childcare discounts
• Work-Life Integration: Mentally Fit Employee Assistance Program, subsidized and discounted Weight Watchers® program and other employee discount programs
• Other Compensations: travel allowances, relocation assistance, signing bonus and/or equity may be available depending on the role

Pay

Base Pay Range: $110,000.00 – $180,000.00. An individual’s position in the range is determined by the specific role, scope and responsibilities, work experience, education, certification(s), training, and additional qualifications. Incentive compensation is available through the annual incentive plan.