A

Ally Financial

Auto financing and digital banking provider

Cloud Security Principal Engineer

Security Engineering & ArchitectureUpdated on Nov 12
Full-time

About the Job

Requirements

  • At least 7 years of relevant experience.
  • A bachelor’s degree in a relevant field of study or equivalent experience.
  • Demonstrated technical expertise in two or more technology areas, such as compute, storage, network, or data.
  • Strong programming skills in Python and Terraform, with experience in frameworks such as TensorFlow and PyTorch.
  • At least 5 years of experience in information security practices, controls, and governance; CISSP is preferred.
  • At least 5 years of experience as a technical resource within an IT organization; enterprise or matrixed organization experience is preferred.
  • At least 4 years of experience with cloud platforms; operational experience with AWS, Azure, or GCP is preferred.
  • Working knowledge of the OWASP Top 10 LLM and AI security topics.

Responsibilities

  • Support existing cloud security infrastructure and security projects, with potential responsibilities involving the DevOps toolchain, cloud automation, SaaS posture management, AI, and other technologies.
  • Define and mature cloud-focused security policies and controls, including governance, processes, frameworks, and metrics.
  • Manage day-to-day troubleshooting of the enterprise cloud security posture management (CSPM) platform and other security controls, including configuration tuning, troubleshooting, and defining and executing escalation criteria.
  • Work with security teams to tune control systems to meet business needs.
  • Identify security risks, report them with the IPRM team, and lead remediation efforts.
  • Perform architecture and engineering responsibilities for existing technologies and new security projects.
  • Perform daily, weekly, and monthly health checks and user activity audits, and determine baseline offsets.
  • Identify, implement, and operationalize security technologies and processes to improve visibility and reduce risk.
  • Partner with technical leaders across the organization to refine and mature security posture for cloud-based technologies and platforms, and to identify and mature application security capabilities.
  • Consult with project teams to ensure platform architectures have appropriate security controls, focusing on cloud providers and SaaS engagements.
  • Support cloud platform security and DevSecOps/pipeline security.

Desired Qualifications

  • Experience as a software developer, with knowledge of automation, infrastructure as code, and DevOps and continuous integration/continuous delivery (CI/CD) tools and processes.
  • CISSP certification.
  • Operational experience with AWS, Azure, or GCP cloud platforms.
  • Experience working in an enterprise or matrixed organization.

About the Company

Ally Financial

Auto financing and digital banking provider

Ally Financial originated as GMAC, the dealership-financing arm of General Motors, and now operates as an independent bank holding company. It provides consumer auto loans, dealership financing, and digital banking services through Ally Bank (online accounts and related products). The company differentiates itself with a long transition to a customer-focused, digitally driven platform that emphasizes clear pricing and online access. Its goal is to deliver accessible, transparent auto financing and online banking to customers nationwide.

Company size
10,001+
Company stage
IPO
Headquarters
Detroit, MI
Founded
1919

Recently Posted Jobs

Explore more opportunities at Ally Financial

See more jobs