Senior Cloud Security Engineer
Alloy · New York City
About this role
**Senior Cloud Security Engineer** **About Alloy** Alloy is the AI-powered identity and fraud prevention platform that accelerates onboarding, stops fraud, and scales compliance across the customer lifecycle—so financial organizations can grow without limits. More than 900 leading financial institutions and fintechs trust Alloy for smarter risk management. Alloy values: **Be Bold, Go Fast, Collaborate, and Celebrate Our Differences**. **About the team** Product Security covers **application security** and **cloud security**. Because Alloy’s customers are banks and fintechs, security readiness shows up in client due diligence, what we can sell, and whether deals close. The program is still being matured—so this role helps shape how engineering designs and ships infrastructure. Alloy operates in a **hybrid-work** environment, with local employees onsite **three days per week**. --- ## What you’ll be doing - Partner with the Infrastructure team to build security into new cloud infrastructure as it’s designed, and act as the security point of contact for new builds - Lead initiatives you scope to reduce cloud infrastructure risk in repeatable, maintainable ways - Build **alerts, detections, and dashboards** in **CSPM** and **SIEM**, and write **runbooks** to make them actionable for on-call engineers - Own **CSPM findings** end to end (triage → remediation), including **Terraform changes** that fix issues at the source - Drive **AWS permissions and network design** toward least privilege, and debug without widening the attack surface - Join the on-call rotation, investigate security incidents to root cause, and implement controls to prevent recurrence --- ## Who we’re looking for **Must-haves** - **3+ years** in cloud security, or cloud infrastructure with a security focus, primarily **AWS** - Hands-on with AWS networking and security services: **VPC design, security groups, NACLs, WAF, GuardDuty, Config, Inspector, KMS, IAM** - Provisioning infrastructure as code with **Terraform**; working knowledge of **Kubernetes or EKS** - Experience with **SIEM** and **CSPM** (tuning alerts, building detections engineers act on) - Scripting/programming in **Python or TypeScript**, with an eye for where code itself creates risk - On-call incident response experience; ability to explain risk and remediation to engineers outside security **Nice-to-haves** - **AWS Organizations** and multi-account environments - **AWS Solutions Architect Associate** or **AWS Security Specialty** - **Public key infrastructure** and applied cryptography --- ## Compensation & benefits - Anticipated base salary range: **$163,000 – $206,000** (may vary by experience, skills, and geography) - Eligible for equity awards (stock options / ISOs) and a competitive total benefits package **Benefits and perks include** - Unlimited PTO + flexible work policy - Employee stock options - Medical/dental/vision with HSA (employer contribution) and FSA options - 401k with **100% match up to 4%** - 16 weeks paid parental leave for eligible new parents - Home office stipend (new employees) - Annual learning & development stipend - Well-being benefits (ClassPass, OneMedical, UrbanSitter, Spring Health) - Hybrid work expectations (Tues–Thurs onsite at HQ in Union Square, Manhattan; Mon/Fri typically remote) --- ## How to apply Apply right here. Alloy is an equal-opportunity workplace and committed to inclusive hiring, including providing reasonable accommodations. Communication du
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.