Senior Cloud Security Engineer - Infosec

Mercury Mercury · Fintech · Remote · Engineering

Mercury is seeking a Senior Cloud Security Engineer to build and define cloud security posture, enable cyber resilience, and implement zero trust initiatives. The role involves automating cloud security controls, shaping AWS cloud architecture, and collaborating with various teams to address security, privacy, and compliance challenges in a remote-first environment. The ideal candidate will have experience in cloud security, networking, or information security, familiarity with security frameworks and privacy regulations, and strong problem-solving skills.

What you'd actually do

  1. Help build and define cloud security posture. Enable cyber resilience. Help with zero trust initiatives.
  2. Have an understanding of Governance, Risk and Compliance as it relates to cloud engineering
  3. Work with the infrastructure and other engineering teams to improve the overall reliability and security of our cloud infrastructure
  4. Automate cloud security controls to ensure threats, vulnerabilities, and risk are minimized
  5. Shape Mercury's AWS cloud architecture around resilience, least privilege, and long-term maintainability

Skills

Required

  • 5+ years relevant experience in cloud security, networking, information security, or other relevant fields.
  • Familiarity with standard security frameworks and privacy regulations (NIST CSF, FFIEC, SOX, SOC2, GLBA, ISO27018, PCI-DSS, etc.)
  • Deep problem-solving and analytical skills
  • A fundamental understanding of accepted security practices, troubleshooting issues, attack vectors, and customer support.
  • Familiarity with information as code (IaC) tooling.

Nice to have

  • AWS certifications are encouraged.

What the JD emphasized

  • Protecting our customers’ security and privacy is a top priority
  • guardrails
  • automation
  • security, privacy, and compliance challenges
  • standard security frameworks and privacy regulations (NIST CSF, FFIEC, SOX, SOC2, GLBA, ISO27018, PCI-DSS, etc.)