B

BNY

Safeguards and moves assets for investors

Vice President Cloud Security Engineer - Information Security

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-time$83k - $209kIn-person

About the Job

Requirements

  • Six to ten years of experience in cloud security engineering, security engineering, DevSecOps, infrastructure security, or a related technical security role.
  • Proven experience identifying, assessing, and promoting AI use cases that improve cloud security outcomes.
  • Experience with security automation, orchestration, analytics, and AI-driven security tooling.
  • Hands-on experience working with and securing workloads in AWS, Azure, or GCP.
  • Working knowledge of cloud security principles across identity and access management, networking, encryption, logging, secrets management, workload protection, and secure service configuration.
  • Experience implementing security controls for cloud-native services and modern application environments.
  • Familiarity with Cloud Security Posture Management concepts and tools such as Wiz.
  • Experience with cloud-native policy and posture tools, including Azure Policy and Microsoft Defender for Cloud.
  • Experience with infrastructure as code and automation using tools such as Terraform.
  • Bachelor’s degree in computer science, engineering, cybersecurity, or a related discipline, or equivalent practical experience.
  • Familiarity with CIS Benchmarks, CSA CCM, OWASP, or NIST CSF.
  • Relevant certifications such as AWS Security Specialty, Azure Security Engineer Associate, Google Professional Cloud Security Engineer, or CCSP.

Responsibilities

  • Support implementation and continuous improvement of cloud security controls across infrastructure, platform, and application environments in AWS, Azure, or GCP.
  • Support enablement of AI for cloud security by promoting AI use cases that improve security outcomes.
  • Drive security integration into CI/CD pipelines and infrastructure delivery processes to ensure secure-by-design and secure-by-default deployment models.
  • Support implementation efforts for container, Kubernetes, API, and cloud-native workload security controls.
  • Drive the operational maturity of Cloud Security Posture Management capabilities to identify misconfigurations, policy violations, excessive permissions, exposed assets, and control drift.
  • Partner with engineering and cyber teams to optimize Wiz and similar Cloud Security Posture Management and Cloud-Native Application Protection Platform platforms, including workflow integration, prioritization, remediation support, and reporting.
  • Implement policy as code, automated guardrails, and infrastructure-as-code patterns to improve control consistency and reduce manual processes.
  • Partner with cloud architects and governance stakeholders to improve standards adoption, exception handling, and control coverage.
  • Maintain and improve documentation for cloud security standards, design patterns, engineering procedures, and operating guidance.

Desired Qualifications

  • Exposure to container and Kubernetes security, API security, or vulnerability management.

About the Company

BNY

Safeguards and moves assets for investors

BNY safeguards financial assets and runs investment services for institutions, investment firms and wealthy clients around the world. Its custody business keeps clients' securities safe and handles the records and transactions needed to administer investment funds. Banks and brokers use its systems to settle trades, manage collateral and send payments, while its investment and wealth businesses manage portfolios and advise clients. It earns servicing and management fees as well as interest on loans and securities funded by client deposits. BNY traces its roots to the Bank of New York, founded by Alexander Hamilton in 1784, and is headquartered in New York City.

Company size
10,001+
Company stage
IPO
Headquarters
New York City, New York
Founded
1784

Recently Posted Jobs

Explore more opportunities at BNY

See more jobs