Senior Vice President, Senior Cloud Security Engineer
BNY Mellon6 months ago
Base Salary
$83k - $209k/yr
Responsibilities
- Lead the implementation and continuous improvement of cloud security controls across AWS, Azure, or GCP.
- Implement controls for IAM, network security, encryption, key management, secrets management, logging, monitoring, workload protection, containers, Kubernetes, APIs, and cloud-native workloads.
- Drive CSPM maturity using Wiz or similar platforms and native cloud policy and posture services to detect, prioritize, and remediate misconfigurations, exposure risks, excessive permissions, and policy violations.
- Design and implement policy-as-code, automated guardrails, and infrastructure-as-code patterns using tools such as OPA/Rego and Terraform.
- Align technical controls with NIST SP 800-53 and enterprise security requirements, and strengthen control evidence, traceability, and consistency.
- Partner with cloud engineering, DevSecOps, IAM, platform, architecture, application, and cyber teams to embed secure patterns into engineering workflows.
- Provide senior technical guidance on secure cloud implementation, standards adoption, exception handling, remediation priorities, and risk-based decision-making.
- Support cloud security strategy, governance forums, audits, regulatory reviews, metrics, reporting, and documentation.
- Identify and promote responsible AI use cases for threat detection, posture analysis, risk prioritization, automation, incident response, and security operations.
- Use and improve cloud-native policies, Wiz rules, KQL, Splunk, Microsoft Sentinel, Log Analytics, Bash, PowerShell, gcloud, Terraform, and GitLab in an enterprise setting.
Requirements
- 6–10 years of experience in cloud security engineering, security engineering, DevSecOps, infrastructure security, or a related security engineering role.
- Strong hands-on experience securing workloads and services in AWS, Azure, or GCP.
- Strong knowledge of IAM, networking, encryption, secrets management, logging, workload protection, resilience, and secure cloud service consumption.
- Experience implementing cloud security controls at scale in enterprise or regulated environments.
- Strong familiarity with NIST SP 800-53, MCSB, and related control areas including access control, audit and accountability, configuration management, identification and authentication, incident response, risk assessment, communications protection, and information integrity.
- Strong understanding of CSPM, including continuous compliance monitoring, misconfiguration detection, exposure analysis, remediation, and governance workflows.
- Experience with CSPM/CNAPP platforms such as Wiz, Prisma Cloud, Orca, Lacework, or similar tools.
- Experience with AWS Config, AWS Security Hub, AWS Organizations SCPs, Azure Policy, Microsoft Defender for Cloud, GCP Organization Policy, or Google Security Command Center.
- Experience developing or supporting policy-as-code and automated guardrails using OPA/Rego or equivalent frameworks.
- Strong experience with infrastructure as code and automation using Terraform, CloudFormation, ARM, Bicep, Python, or similar tooling.
- Experience with container and Kubernetes security, API security, vulnerability management, security automation, orchestration, analytics, and AI-driven security tooling.
- Experience supporting cloud security strategy, governance, standards, exception handling, remediation tracking, risk reporting, architecture reviews, or cloud governance processes.
- Bachelor’s degree in computer science, engineering, cybersecurity, or a related discipline, or equivalent practical experience.
- Experience in a regulated industry such as financial services.
- Familiarity with CIS Benchmarks, CSA CCM, OWASP, or NIST CSF.
- Relevant certifications such as AWS Security Specialty, Azure Security Engineer Associate, Google Professional Cloud Security Engineer, or CCSP are preferred.
- Strong technical judgment, problem-solving, written and verbal communication, and cross-functional collaboration skills.
Benefits
- The role is based in New York, NY or Pittsburgh, PA.
- BNY offers competitive compensation, benefits, wellbeing programs, flexible global resources, generous paid leave, and paid volunteer time.
- Benefits and programs support employee health, resilience, financial goals, and family needs.
Tech Stack
Categories
About BNY Mellon
BNY Mellon is a public, New York–based global financial services company providing investment and wealth management, asset servicing, clearance, collateral, and treasury services to institutions, banks, governments, and individuals. It also offers data and investment operations software, including the Eagle platform, delivered as cloud and managed services. Founded in 1784, it is one of the world’s largest custodian banks and asset servicers.