Senior Cloud Security Engineer - InfoSec

Mercury is a fintech company that builds financial products supported by secure, reliable infrastructure. The Senior Cloud Security Engineer will design cloud security systems, guardrails, and automation, while collaborating across engineering and enterprise teams to address security, privacy, compliance, resilience, and remote-access challenges.

Responsibilities:

• Help build and define cloud security posture. Enable cyber resilience. Help with zero trust initiatives
• Have an understanding of Governance, Risk and Compliance as it relates to cloud engineering
• Work with the infrastructure and other engineering teams to improve the overall reliability and security of our cloud infrastructure
• Automate cloud security controls to ensure threats, vulnerabilities, and risk are minimized
• Shape Mercury's AWS cloud architecture around resilience, least privilege, and long-term maintainability
• Work with teams throughout Mercury to address remote access challenges in a remote-first environment
• Work with teams and stakeholders throughout Mercury to address security concerns in the cloud

Requirements:

• 5+ years relevant experience in cloud security, networking, information security, or other relevant fields
• A strong desire to learn and grow and proven track record of doing so
• Familiarity with standard security frameworks and privacy regulations (NIST CSF, FFIEC, SOX, SOC2, GLBA, ISO27018, PCI-DSS, etc.)
• Deep problem-solving and analytical skills, and poise and ability to act calmly and competently in high-pressure, high-stress situations
• A fundamental understanding of accepted security practices, troubleshooting issues, attack vectors, and customer support
• Familiarity with information as code (IaC) tooling
• AWS certifications are encouraged