Required Qualifications

8+ years of hands-on cybersecurity experience, with significant experience in security engineering, cloud security, infrastructure security, or security architecture.

Prior experience in financial services, banking, fintech, payments, lending, insurance, or another regulated financial environment is required.

Proven experience securing and operationalizing an AWS environment, ideally from early-stage setup or greenfield implementation.

Strong hands-on knowledge of AWS security services, IAM, networking, encryption, logging, monitoring, and cloud governance.

Strong understanding of on-premises infrastructure security, including Windows/Active Directory, network security, endpoint security, vulnerability management, privileged access, and SIEM/logging.

Practical experience designing and implementing security controls, not just reviewing policies or writing standards.

AI security experience, especially securing LLM-based applications, RAG systems, AI agents, internal AI tools, or AI-enabled workflows

Demonstrated ability to lead, mentor, and manage a small technical security team.

Experience supporting audits, regulatory exams, security assessments, and evidence collection.

Strong communication skills with the ability to explain technical security matters to IT, audit, risk, vendors, and senior leadership.

Independent, self-directed working style with the ability to own outcomes without heavy supervision.

Strongly Preferred Qualifications

Snowflake security experience, including RBAC, masking policies, row access policies, network policies, SSO, logging, and data governance.

Experience with secure software development, DevSecOps, CI/CD security, SAST/DAST/SCA, secrets scanning, container security, and infrastructure-as-code security.

Experience with AWS Control Tower, Organizations, SCPs, GuardDuty, Security Hub, Config, IAM Identity Center, KMS, Macie, Inspector, CloudTrail, and CloudWatch.

Experience with Microsoft security ecosystem, including Entra ID, Defender, Purview, Intune, Sentinel, or related tools.

Security certifications such as CISSP, CCSP, AWS Certified Security – Specialty, CISM, GIAC, or equivalent practical experience.

Desired Technical Skills

AWS security architecture and operations

IAM, least privilege, privileged access management

Network security, firewalls, segmentation, VPN, zero trust concepts