Senior Cloud Security Engineer

Delta Exchange is re-imagining and rebuilding the financial system through an innovative cryptocurrency derivatives exchange. The Senior Cloud Security Engineer will own the security posture of the AWS infrastructure by validating security controls, reviewing Terraform, automating compliance and drift detection, managing credentials, tuning SIEM detections, and reporting security evidence to leadership.

Responsibilities:

• Verify that infra implementations match the security model — continuously, not quarterly
• Build automated compliance checks and drift detection (AWS Config, Steampipe, custom tooling, whatever works)
• Review Terraform PRs for IAM, SCP, and network security gaps before they hit production
• Own credential lifecycle: rotation, PAM, JIT access, session recording
• Write and tune detection rules in OpenSearch SIEM
• Build evidence dashboards that prove security posture to non-security leadership 7. Evaluate security tooling (build vs buy) and own the recommendation with documented tradeoffs

Requirements:

• 5+ years in infrastructure or security engineering, with at least 2 years focused on AWS security
• IAM beyond basic roles — you understand policy evaluation logic, permission boundaries, cross-account access patterns
• Have built automated security checks that run in production (any tooling)
• Can read and critically review Terraform for security posture
• Have operated PAM tooling or credential rotation in production (any tool)
• Comfortable owning a security domain end-to-end without constant direction
• Worked at an org < 500 people where you were one of the very few (or the only) security engineers
• Multi-account AWS Organizations / SCP experience
• Wrote SIEM detection rules in production (any platform — OpenSearch, Splunk, Elastic, etc.)
• Regulated fintech, exchange, or payments background
• Built security evidence/reporting that non-security people actually used