Senior Cloud Security Engineer – Boston/Cloud Assurance/AWS

Daily Responsibilities

• Conduct security reviews of cloud platforms, SaaS solutions, and technology integrations
• Evaluate new cloud technologies and provide risk-based security recommendations
• Partner with engineering teams to address identified security gaps and control deficiencies
• Review architecture diagrams and technical designs for security concerns
• Perform cloud assurance assessments and document findings
• Develop repeatable processes for evaluating cloud security risks
• Track remediation efforts and validate implementation of security controls
• Support cloud-related compliance reviews and audit activities
• Improve visibility into third-party cloud services and technology dependencies
• Create documentation, standards, and guidance for secure cloud adoption

About the Role

The Senior Cloud Security Engineer will focus on assessing, securing, and continuously monitoring the security posture of cloud services and external technology integrations. This role is centered on cloud assurance, technology risk reduction, vendor security evaluations, and secure cloud adoption.

Responsibilities

• Work closely with cloud engineering teams, procurement, legal, compliance, enterprise risk, and technology leadership to evaluate the security implications of new cloud services before they are introduced into the environment
• Review architecture designs, perform security assessments, identify control gaps, and help teams implement practical security solutions that support both innovation and risk management
• Enjoy investigating how systems connect, understanding where risks exist across cloud ecosystems, and developing scalable processes that improve confidence in technology decisions

Requirements

• Strong experience securing AWS and/or Azure environments
• Experience performing cloud security assessments and reviews
• Knowledge of cloud architecture and security best practices
• Experience evaluating third-party cloud solutions and SaaS platforms
• Understanding of risk assessment methodologies and security controls
• Knowledge of cloud logging, monitoring, and security operations concepts
• Ability to identify security, privacy, and operational risks within cloud environments
• Experience with scripting or automation using Python, PowerShell, or similar languages
• Strong written and verbal communication skills

Qualifications

• 5+ years of cloud security, security engineering, or cybersecurity experience
• Experience within financial services, asset management, or regulated industries
• Familiarity with SOC 2, ISO 27001, NIST, or similar frameworks
• Experience working with cloud vendors and third-party technology providers
• Knowledge of disaster recovery, resilience, and operational risk concepts
• Exposure to cloud compliance and audit activities
• CISSP, CCSP, CRISC, AWS Security Specialty, or similar certifications
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field