Cloud Security Engineer

Morningstar - Chicago, IL

Full-time

Remote - Chicago, IL

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

About the position

As a Cloud Security Engineer on the Cloud Services team, you will support the creation and communication of cloud security best practices across all product teams at Morningstar. The role involves contributing to the information security roadmap, delivering secure systems, and ensuring compliance with regulatory and risk requirements. Key responsibilities include performing security reviews, engineering new technologies, optimizing programs, and mitigating operational risks while collaborating with various teams.

Responsibilities

• Conduct security reviews for new products, technologies, and services.
• Design, architect, and implement secure systems.
• Influence decision-makers and stakeholders to maintain high security standards.
• Create security guidance and documentation.
• Assist in security projects, including reviews, tool development, and new security practices.
• Develop security tools and automation solutions.
• Deliver security training and outreach to internal development teams.

Requirements

• Bachelor's degree in a relevant field (Computer Science, Software Engineering, Security, etc.) or equivalent experience.
• Minimum of 3 years of professional experience in at least 2 technical disciplines such as cloud engineering, cloud security, network security, application security, etc.
• Strong foundational knowledge of AWS, Microsoft Azure, and/or Google Cloud technology stack.
• Experience standardizing security best practices for Azure/GCP and/or AWS.
• Experience in building and operating automated security operations.
• Proficiency in implementing cloud services via Infrastructure-as-Code.
• Scripting experience (Python, Bash, PowerShell, etc.).
• Ability to design and advise on security requirements for cloud migration efforts.
• Strong knowledge of industry trends in security technology.
• Excellent debugging, critical thinking, communication, and documentation skills.

Nice-to-haves

• Experience with CI/CD deployment pipelines and automated build/configuration tools.
• Networking and infrastructure skills.
• Experience working with Wiz.
• Passion for staying current on trends and best practices in cloud/information security.

Benefits

• Hybrid work environment with 3 days onsite and 2 days remote work.
• Tools and resources for meaningful engagement with global colleagues.