Staff Cloud Security Engineer

4 days ago

Base Salary

$145k - $195k/yr

Responsibilities

Own cloud security architecture across Google Cloud Platform environments, including IAM, least privilege, VPC Service Controls, Organization Policy, Shared VPC, Workload Identity, KMS, encryption, and Security Command Center.
Design, deploy, and tune Cloudflare and Google Cloud Armor edge and application-layer defenses, including WAF, DDoS Protection, Zero Trust/Access, Bot Management, Rate Limiting, Security Policies, Adaptive Protection, and Global Load Balancer integration.
Lead threat modeling and security architecture reviews for new services and major platform changes.
Build policy-as-code, secure Terraform modules, and CI/CD security controls.
Advance cloud detection and response with SOC and Incident Response teams through logging pipelines, Chronicle/SIEM detections, and cloud-native alerting.
Respond to security incidents through investigation, containment, remediation, and post-incident hardening.
Translate ISO, SOC 2, SOX, PCI DSS, and similar regulatory requirements into technical controls and evidence.
Mentor senior and mid-level engineers and represent Cloud Security in planning, architecture reviews, and strategic initiatives.

8+ years of experience in security engineering, including at least 5 years focused on cloud security in production environments.
Deep hands-on experience securing Google Cloud Platform environments, including IAM, networking, VPC Service Controls, Security Command Center, KMS, and Organization Policy.
Production experience with Cloudflare, including WAF, DDoS Protection, Zero Trust/Access, Bot Management, and Google Cloud Armor.
Strong Infrastructure-as-Code experience with Terraform and experience securing CI/CD pipelines.
Proficiency in at least one programming or scripting language such as Python or Go.
Experience securing workloads in regulated industries and familiarity with PCI DSS, SOC 2, ISO, SOX, or similar frameworks.
Demonstrated technical leadership and ability to influence engineering teams without direct authority.
Preferred qualifications include Google Professional Cloud Security Engineer, CISSP, GCP Professional Cloud Architect, or similar certifications; GKE/Kubernetes and container or software supply chain security experience; AWS and Azure experience; detection engineering or threat hunting experience; and fintech, payments, trading, or other regulated financial experience.

Salary range is $145,000.00 - $195,000.00 USD, plus a 12% annual target bonus.
401(k) plan through ADP with up to a 3.5% company match.
23 days of annual paid time off, seven paid holidays, five conditional holidays, and one service day.
Paid parental bonding leave and health, vision, dental, life, and disability insurance, with life and disability coverage paid 100% by NinjaTrader.
Chicago-based hybrid schedule with in-office work Tuesday through Thursday and remote work Monday and Friday, plus 20 additional flex remote days annually and five company-wide office-optional weeks.
Role is not open to remote candidates outside the Chicago-based hybrid arrangement.

501-1,000 employees