Staff Security Engineer

Are you a Staff Security Engineer who can drive the continuous enhancement and safeguarding of our cloud security landscape?

Thredd is looking for a Staff Security Engineer to join our team! As our Staff Security Engineer, you will collaborate with Thredd Platform Delivery and InfoSec teams to design secure environments for core production services. You will integrate DevSecOps principles, automate security processes like secret and container scanning, and enhance vulnerability management and threat modeling. Serving as both a subject matter expert and hands-on engineer, you will improve Thredd's security posture, maintain security pipelines, and increase cybersecurity awareness by sharing insights and implementing effective controls.

Responsibilities:

• Leads technical projects by incorporating client requirements, aligning designs with client needs, and ensuring feedback integration for a client-first approach.
• Develops and maintains security documentation, including architecture diagrams, enhances engineering workflows with data solutions, and establishes robust reporting mechanisms to track performance and outcomes.
• Stay updated on the latest engineering trends and best practices, leveraging insights to influence projects and enhance organizational capabilities through engagement with industry professionals.
• Recommends and implements cloud security best practices, such as CIS Benchmarks, manages security monitoring and incident handling, mentors team members in adopting new technologies and methodologies, and designs scalable engineering solutions that meet both technical and client requirements.
• Prioritises security tool outputs, develops tactical plans for engineering projects, manages resource allocation, and ensures timely delivery by aligning project timelines with broader engineering objectives.
• Demonstrates advanced technical expertise in multiple domains, leads technical initiatives, contributes to product strategy discussions, and drives the adoption of best practices across engineering teams.
• Implement secure cloud architectures for AWS environments, drives cybersecurity practices like vulnerability management and threat modeling, ensures compliance with regulatory requirements (e.g., PCI-DSS, SOX), and fosters a culture of quality within the engineering team.
• Automate security tasks using modern tools and scripting to improve security posture, streamlines cloud security operations with Cloud SecOps practices, and protects revenue through robust cloud security measures.
• Automate security validation within CI pipelines, including secret scanning and compliance checks, supports multi-cloud design (IaaS, PaaS, SaaS) and hybrid approaches for secure access across co-located and cloud workloads, and contributes to the technical vision by evaluating engineering strategies that align with organizational goals and market demand.

What you bring:

• Prior experience as cloud security engineer or equivalent within the financial services industry.
• In-depth knowledge of cloud security architecture, best practices, and frameworks (e.g., NIST, CSA, CIS).
• Experience with security automation, orchestration, and DevSecOps practices.
• Must have in-depth exposure to EKS.
• Proficiency in scripting and programming languages (e.g., Python, PowerShell, Bash) for security automation.
• Strong understanding of encryption technologies, identity and access management (IAM), and network security in cloud environments.
• Familiarity with compliance frameworks applicable to the financial services industry (e.g., PCI-DSS, SOX).

This role is a remote role. Thredd operates in a secure environment and all candidates will be Credit and Background checked to the extent permitted by law. Only direct applicants will be considered for this role; we do not accept applications from recruitment agencies.