Senior Cloud Security Engineer

Interactive Brokers - Greenwich, CT

Full-time - Mid Level

Hybrid - Greenwich, CT

Securities, Commodity Contracts, and Other Financial Investments and Related Activities

About the position

The Senior Cloud Security Engineer at Interactive Brokers is responsible for designing, deploying, and operating a secure cloud infrastructure. This role focuses on enhancing the company's security posture within cloud computing environments while supporting operational innovation and workflow automation. The engineer will work closely with various teams to assess security risks and implement appropriate security practices.

Responsibilities

• Develop and maintain secure, resilient enterprise-grade cloud security infrastructure and processes in collaboration with system architects, infrastructure engineers, and application developers.
• Conduct rigorous oversight of security systems and security configuration administration to reduce risk to enterprise systems and accounts.
• Develop and deploy strong identity and access management (IAM) controls across applications and computing environments.
• Advise on developing and utilizing scripts (e.g., Python, Ruby, Perl, etc.) to support custom Extract, Transform and Load (ETL) tools with a security focus on data flow.
• Actively monitor, assess and recommend tactical and strategic initiatives based on new and emerging threats to cloud computing environments.
• Manage and track remediation efforts triggered by security assessments related to cloud computing environments.
• Formulate, document, and implement security improvements that balance risks with business operations efficiency and the need for innovation.

Requirements

• Five years of experience in cybersecurity with at least two years of exposure to cloud-based technologies and operations, preferably AWS or Microsoft Azure.
• Detailed technical understanding of how cloud environments operate 'under the hood'.
• Good understanding of security concepts and technologies.
• Experience with network and host-based monitoring, logging, alerting, and response frameworks.
• Experience in scripting languages like Python, PowerShell, Javascript, Ruby, Perl, Unix Shell (bash/ksh), etc.
• Experience with Continuous Integration & Continuous Deployment (CI/CD) technologies, such as Jenkins, CodeBuild, Puppet, etc.

Nice-to-haves

• Experience creating and deploying Indications of Compromise (IoC), gathering system metrics, and responding to triggered alerts.
• Operational experience in maintaining and administrating the security posture of large-scale deployments.
• Familiarity with common security frameworks and standards, such as NIST CSF, ISO/IEC 27001:27013, CIS CSC, PCI DSS, etc.

Benefits

• Competitive salary, annual performance-based bonus and stock grant
• Retirement plan 401(k) with a competitive company match
• Excellent health and wellness benefits, including medical, dental, and vision benefits and a company-paid medical healthcare premium
• Wellness screenings and assessments, health coaches and counseling services through an Employee Assistance Program (EAP)
• Paid time off and a generous parental leave policy
• Daily company lunch allowance provided, and a fully stocked kitchen with healthy options for breakfast and snack
• Corporate events, including team outings, dinners, volunteer activities and company sports teams
• Education reimbursement and learning opportunities
• Modern offices with multi-monitor setups