Associate Director Cloud Security Engineering

Are you ready to make an impact at DTCC?

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We're committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential, building infrastructure capabilities to meet client needs and implementing data standards and governance.

Pay and Benefits:

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

The impact you will have in this role:

Being a member of IT Cybersecurity & Platform Strategy team, the purpose of Cloud Security Engineering team is to provide outstanding and versatile cloud security services to the enterprise securing the workloads, application and data in AWS, Azure and GCP. This position is for a Cloud Security Manager. The ideal person is passionate about building, mentoring and leading a highly motivated cloud security team. 

Your Primary Responsibilities:

• Lead and mentor a team of cybersecurity engineers specialized in securing cloud and cloud assets including workloads, containers, applications and data.
• Align cloud security strategy with business objectives and regulatory requirements for IaaS, PaaS, and SaaS
• Identify deficiencies in cloud security services, propose plans for improvement and implement them.
• Find opportunities for automation and improving AI/ML capabilities cross the technology stack.
• Evaluate and create cloud security baselines and implement monitoring to assure compliance. 
• Document security policies, controls, and processes, and develop runbooks and how-to guides for operational readiness of engineered solutions.
• Partner closely with stakeholders to prepare new security technologies and functionalities for implementation into the production environment. This includes but is not limited to, security standard methodologies. 

**NOTE: The Primary Responsibilities of this role are not limited to the details above. **

Qualifications:

• Minimum of 8 years of related experience
• Bachelor's degree and/or equivalent experience

Talents Needed for Success:

• 8+ years of proven experience with AWS, Network security, and System security with demonstrated experience in Cloud Security tools such as Aquasec, Inspector and Wiz. 
• Additional Cloud computing experience with Azure, GCP, and Containerization is a plus. 
• Experience securing Kubernetes, Containers, workloads and monitoring using CNAPP and CSPM tools.
• Understanding of Terraform, CI/CD and deployment architectures.
• Experience with vulnerability management, SIEM, compliance to security baselines, and Identity and Access Management in the cloud and on-prem (AD, Ping, ADFS, etc.). 
• Familiarity with industry standards, guidelines, and regulatory compliance requirements related to information security and cloud computing (NIST 800-53, ISO-27001, etc.). 
• Experience with delivering reliable, available, and high-performance enterprise-scale solutions. 
• Programming experience one or more of the following languages: Python, C#, C++, PowerShell, Bash, Terraform, and SQL as well as experience with GIT version control (GITFlow, GitHub, BitBucket, etc.)
• One or more of the following certifications: Cloud (AWS, Azure, Google Cloud Platform), CISSP. 

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.