Senior Security Engineer

Bridgewater Associates is a premier asset management firm focused on delivering unique insights for global institutional investors. They are seeking a Senior Security Engineer to build secure platforms for software delivery, focusing on CI/CD pipelines and cloud infrastructure while collaborating with various teams to embed security controls into workflows.

Responsibilities:

• Partner with application, platform, infrastructure, and cloud teams to ensure secure, scalable delivery of technology solutions
• Design and implement security solutions that are reusable, automated, and adoptable across teams
• Participate in infrastructure, IaC, application, CI/CD, and cloud security reviews
• Embed security controls directly into developer workflows, pipelines, and platforms
• Communicate technical decisions and risk tradeoffs clearly to engineering teams and stakeholders
• Contribute to the design and implementation of security initiatives and improvements
• Advocate for pragmatic security controls that balance risk reduction with developer velocity and business value
• Apply strong technical judgment to solve problems in distributed, cloud-based systems

Requirements:

• Bachelor's or Master's degree in Computer Science or a related field, or equivalent practical experience
• 5+ years of experience in security engineering, security architecture, or platform/infrastructure security
• 2+ years of hands-on experience with one or more of the following programming languages: Python, Go, Java, or similar
• Strong experience with modern software development workflows and tools (Git, GitHub/GitLab, CI/CD systems)
• Experience implementing security controls using Infrastructure as Code tools such as Terraform, Ansible, or similar
• Experience securing cloud environments in AWS and/or Azure
• Familiarity with cloud security posture management (CSPM) and runtime security tools (e.g., Wiz or equivalents)
• Solid fundamentals in networking and distributed systems
• Experience working across Linux and Windows environments
• Experience with Kubernetes (EKS and/or AKS)
• Experience using AI-assisted development tools (e.g., Cursor, Claude Code, GitHub Copilot) to accelerate secure coding and refactoring, improve code review quality and consistency, and prototype security tooling and automation
• You are a passionate engineer, and technology has always been part of how you think and learn—whether through personal projects, open-source contributions, or continuous experimentation
• You actively stay current on emerging technologies, modern attack techniques, and evolving security controls
• You take ownership of your work and follow through from design to implementation
• You value direct feedback, intellectual rigor, and collaborative problem-solving
• You believe strong security outcomes come from effective teamwork and shared accountability
• Hands-on experience with cloud-native and containerized platforms, including Kubernetes, Docker, and serverless technologies
• Experience securing Kubernetes, code repositories, and CI/CD pipelines
• Familiarity with tools such as Kyverno, Gatekeeper, Trivy, TruffleHog, Wiz, or similar
• Experience with Zero Trust architectures and related tooling
• Background in network and application security controls (firewalls, WAFs, proxies, DLP, IDS/IPS)
• Experience participating in threat modeling and secure design reviews
• Exposure to data platforms and securing data pipelines
• Relevant security certifications such as CISSP, CCSP, CKS, GIAC, AZ-500, or AWS Security