Description

Own the security architecture, implementation, and continuous improvement for the bank’s on-premises infrastructure, AWS cloud environment, Snowflake data platform, and AI solutions.

This role is on-site.

Responsibilities

• Design and implement secure-by-design patterns for identity, network segmentation, encryption, logging, monitoring, and access governance.
• Lead the security design and operationalization of the bank’s new AWS environment, including multi-account structures, IAM, and VPC controls.
• Own security engineering for existing data center infrastructure, ensuring practical and sustainable controls across servers, endpoints, and networks.
• Support the secure implementation of Snowflake, defining access controls, data classification, masking, and audit logging patterns.
• Evaluate new technologies and embed security requirements early in the design and delivery lifecycle.

Required Skills

• 5+ years of experience in security engineering or architecture.
• Deep expertise in AWS cloud security, including IAM, Organizations, CloudTrail, GuardDuty, Security Hub, Config, KMS, Secrets Manager, and Macie.
• Proficiency in CloudWatch for monitoring and logging.
• Experience with CI/CD pipelines and Infrastructure as Code (IaC) security integration.
• Strong knowledge of on-premises security controls, including firewalls, Active Directory, EDR, and SIEM.
• Understanding of Snowflake security features, such as role hierarchy, MFA/SSO, and network policies.
• Bachelor's degree in a relevant field.
• Ability to translate cybersecurity standards into deployable technical controls.

Preferred Skills

• Experience with AI application security and data platform protection.
• Knowledge of vulnerability management and patching strategies.

Key Skills

Education

Bachelor's degree