Lead Cloud Security Engineer

About the role

Are you ready to make an impact at DTCC? Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We're committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve. The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential, building infrastructure capabilities to meet client needs and implementing data standards and governance.

Being a part of the CISO team, the purpose of the Cloud Security Engineering team is to provide outstanding and versatile cloud security services to the enterprise securing the workloads, application and data in AWS, Azure and GCP. This position is for a Lead Cloud Security Engineer. The ideal person is passionate about building, mentoring and leading a highly motivated cloud security team.

Responsibilities

• Align cloud security strategy with business objectives and regulatory requirements for IaaS, PaaS, and SaaS
• Identify deficiencies in cloud security services, propose plans for improvement and implement them.
• Find opportunities for automation and improving AI/ML capabilities across the technology stack.
• Evaluate and create cloud security baselines and implement monitoring to assure compliance.
• Document security policies, controls, and processes, and develop runbooks and how-to guides for operational readiness of engineered solutions.
• Provide Cloud and Compliance Security Engineering operational support as circumstances require
• Partner closely with stakeholders to prepare new security technologies and functionalities for implementation into the production environment. This includes but is not limited to, security standard methodologies.

Requirements

Minimum