Senior Cloud Security Engineer

Position Summary

Seeking an experienced and dedicated Senior Cloud Security Engineer to join our team. This role is crucial for ensuring the security and compliance of our cloud infrastructure in a highly regulated financial environment. The ideal candidate will have a strong background in cloud security, a deep understanding of regulatory requirements, and the ability to design, implement, and maintain secure cloud solutions.

Primary Success Factors

• Design, develop, and deploy scalable cloud-based security solutions to protect sensitive financial data and ensure compliance with industry regulations.

• Perform comprehensive vulnerability testing, risk analyses, and security assessments to identify and mitigate potential threats.

• Develop and coordinate robust cloud security procedures

• Monitor for and respond to security incidents in the cloud environment, utilizing advanced security tools and techniques.

• Collaborate with IT and development teams to ensure cloud solutions are securely integrated with existing software and infrastructure, following best practices and security standards.

• Keep abreast of the latest security issues, regulatory changes, and industry trends to proactively address emerging threats.

• Assist with the design of security training and awareness programs to educate staff about cloud security risks and responsibilities, fostering a culture of security within the organization.

• Regularly report on the status of cloud security, including any breaches or vulnerabilities, to senior management and stakeholders.

• Work with third-party vendors to ensure that security requirements are met and maintain strong relationships with external security partners.

• Maintain compliance with all relevant security and privacy laws and regulations, including PCI-DSS, GDPR, SOX, and other industry-specific standards

Required Experience

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field. Specific experience will be considered in lieu of a degree.

• Minimum of 7 years of experience

• Relevant certifications in Cyber Security, with Cloud specific certifications a plus.

• Proven experience in cloud security engineering, preferably in a financial institution, with a track record of successfully implementing secure cloud solutions.

• Strong knowledge of cloud platforms and cloud security best practices, including identity and access management, encryption, and network security.

• Experience with regulatory compliance frameworks such as PCI-DSS, GDPR, and SOX, and the ability to navigate complex regulatory environments.

• Excellent problem-solving skills and the ability to work under pressure, with a proactive and detail-oriented approach to security.

• Strong communication and collaboration skills, with the ability to effectively convey complex security concepts to both technical and non-technical audiences.

• Experience with DevSecOps practices and tools, including continuous integration and continuous deployment (CI/CD) pipelines.

• Knowledge of infrastructure as code (IaC) and automation tools, such as Terraform, Ansible, or CloudFormation.

• Familiarity with security monitoring and incident response tools, such as SIEM, IDS/IPS, and EDR solutions.

• Ability to deliver with minimal management oversight

We welcome applicants from outside the Pittsburgh area to apply. The Bank offers relocation assistance to candidates that are able to relocate within 90 days of their start date.

It is the policy of the Federal Home Loan Bank of Pittsburgh to ensure equal employment opportunity (EEO) for all employees and applicants for employment without regard to race, religion, color, sex, national origin, age, disability status, genetic information, veteran's status, ancestry, sexual orientation or status as a parent as defined by applicable law. It is the Bank's policy to comply with applicable laws concerning the employment of persons with disabilities, including reasonable accommodation for applicants and employees with disabilities.