3 hours ago
Base Salary
$163k - $206k/yr
Responsibilities
- Partner with Infrastructure to build security into new AWS cloud infrastructure and serve as the security point of contact for new builds.
- Lead self-scoped, repeatable initiatives to reduce cloud infrastructure risk.
- Build and tune alerts, detections, and dashboards in CSPM and SIEM platforms and write actionable runbooks.
- Own CSPM findings from triage through remediation, including source-level fixes in Terraform.
- Drive AWS permissions and network design toward least privilege while debugging security issues safely.
- Participate in on-call rotation, investigate security incidents to root cause, and implement preventative controls.
Requirements
- Have 3+ years of experience in cloud security or cloud infrastructure with a security focus, primarily in AWS.
- Have hands-on experience with AWS networking and security services, including VPC design, security groups, NACLs, WAF, GuardDuty, Config, Inspector, KMS, and IAM.
- Have experience provisioning infrastructure with Terraform and working knowledge of Kubernetes or EKS.
- Have experience with SIEM and CSPM platforms, including tuning alerts and building actionable detections.
- Script or program in Python or TypeScript and understand how code can create security risk.
- Have on-call incident response experience and be able to explain risk and remediation to non-security engineers.
- Experience with AWS Organizations and multi-account environments is preferred.
- AWS Solutions Architect Associate or AWS Security Specialty certification is preferred.
- Knowledge of public key infrastructure and applied cryptography is preferred.
Benefits
- Unlimited PTO and a flexible work policy.
- Employee stock options.
- Medical, dental, and vision plans with HSA employer contributions and FSA options.
- 401k plan with 100% matching up to 4% of annual employee compensation.
- Sixteen weeks of paid parental leave for eligible new parents.
- Home office stipend for new employees.
- Annual learning and development stipend.
- Well-being benefits including ClassPass, OneMedical, UrbanSitter, and Spring Health.
- Hybrid schedule requiring employees to work onsite Tuesdays through Thursdays at the Union Square, Manhattan headquarters, with most employees working from home Mondays and Fridays.
- Catered lunches and employee-organized cultural events.
Tech Stack
Categories
About Alloy
Alloy builds an identity risk and fraud prevention platform used by banks and fintechs to automate KYC/AML checks, onboard customers, and manage compliance across the lifecycle. It sells cloud-based APIs and workflows on a SaaS model, integrating data sources to power risk decisions and reduce fraud losses. Founded in 2015 and headquartered in New York, the privately held company serves more than 900 financial institutions globally.