Cloud Security Engineer

Glocomms is partnered with a leading proprietary trading firm seeking a Cloud Security Engineer to help secure and scale a highly available, performance-driven cloud infrastructure environment. This individual will play a critical role in strengthening the firm's cloud security posture across AWS and multi-cloud platforms, partnering closely with infrastructure, platform, development, and security teams to embed security throughout the design, deployment, and operation of cloud-native technologies.

The ideal candidate brings deep expertise in cloud security architecture, Kubernetes security, automation, and modern security engineering practices, with a strong ability to balance risk reduction with business and technology objectives in a fast-paced trading environment.

Primary Responsibilities

• Design, implement, and enhance cloud security controls across AWS and hybrid/multi-cloud environments to reduce risk and improve overall security posture.
• Conduct cloud architecture and security reviews, providing guidance on secure infrastructure design, cloud migrations, and application deployments.
• Secure Kubernetes platforms and containerized workloads through RBAC, workload identity, network policies, secrets management, runtime protection, and admission controls.
• Build and maintain Infrastructure as Code and Policy as Code frameworks using tools such as Terraform and CloudFormation to automate security guardrails and governance.
• Lead vulnerability management activities, including security assessments, remediation planning, configuration reviews, and continuous security monitoring.
• Support security operations and incident response efforts, including threat analysis, root cause investigations, troubleshooting, and production security events.

Key Qualifications

• 5+ years of experience in cloud security engineering, cloud infrastructure security, security architecture, or related cybersecurity roles.
• Strong hands-on experience securing AWS environments, with exposure to Azure, GCP, or other cloud platforms preferred.
• Deep knowledge of Kubernetes, container security, cloud-native technologies, networking, and secure platform engineering practices.
• Experience implementing IAM, least-privilege access controls, privileged access management, encryption strategies, KMS, HSMs, and secrets management solutions.
• Proficiency with Terraform, CloudFormation, Infrastructure as Code, security automation, and policy enforcement frameworks.
• Programming or scripting experience with Python, Go, JavaScript, or similar languages, along with excellent communication and cross-functional collaboration skills.

This position is based in Chicago and offers the opportunity to join a premier proprietary trading firm where technology and security are critical competitive advantages. The firm strongly prefers a hybrid schedule with three days per week onsite in their downtown Chicago HQ.