Cloud Security Engineer

Introduction

Since 1973, East West Bank has served as a pathway to success. With over 110 locations across the U.S. and Asia, we are the premier financial bridge between the East and West. Our teams of experienced, multi-cultural professionals help guide businesses and community members on both sides of the Pacific looking to explore new markets and create new opportunities, and our sustained growth and expertise in industries like real estate, entertainment and media, private equity and venture capital, and high-tech help build sustainable businesses and expand our associates’ potential for career advancement. 

Headquartered in California, East West Bank (Nasdaq: EWBC) is a top-performing commercial bank with a strong foundation, an enterprising spirit and a commitment to absolute integrity. East West Bank gives people the confidence to reach further.

Overview

As the bank continues to grow and expand its use of cloud technologies, we are seeking a  Cloud Security Engineer  to support the secure design, implementation, and operation of our cloud environments. This role is hands-on and execution-focused, ensuring cloud security controls are implemented effectively, operated consistently, and scaled to support business growth. 

The Cloud Security Engineer works closely with cloud engineering, infrastructure, application, and security teams to protect cloud-based systems and data, reduce risk, and support regulatory and audit requirements. This role focuses on building, configuring, and operating cloud security controls rather than defining long-term architecture strategy. 

Responsibilities

• Implement and operate cloud security controls across cloud environments to protect systems and sensitive data. 
• Support secure cloud deployments by applying security standards, configurations, and guardrails. 
• Perform security reviews and risk assessments of cloud workloads, identifying gaps and supporting remediation. 
• Configure and maintain cloud security tooling for monitoring, detection, and response, including logging, alerting, and integrations with SIEM. 
• Implement access controls, identity permissions, encryption, and key management to protect data in transit and at rest. 
• Partner with application and infrastructure teams to remediate cloud security findings and reduce misconfigurations. 
• Support vulnerability management, penetration testing activities, and security validation for cloud environments. 
• Participate in incident response activities related to cloud security events, including investigation and remediation. 
• Assist with audit and regulatory support by providing evidence and demonstrating cloud security controls. 
• Stay current on cloud security threats, misconfiguration trends, and best practices relevant to the banking industry. 
• May perform other duties as assigned

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience. 
• 5+ years of experience in IT or security engineering roles, with hands-on experience securing cloud environments. 
• Working knowledge of public cloud platforms such as AWS and Azure. 
• Experience implementing and operating cloud security controls such as IAM, network security, logging, encryption, and monitoring. 
• Familiarity with regulatory and industry standards relevant to financial services (e.g., GLBA, PCI-DSS, FFIEC). 
• Experience working with security tools and services used in cloud environments. 
• Strong troubleshooting and problem-solving skills with attention to detail. 
• Ability to work effectively with cross-functional technical teams in a fast-paced environment. 
• Clear written and verbal communication skills suitable for technical and non-technical audiences. 

Preferred Qualifications

• Experience supporting cloud security in a regulated or financial services environment. 
• Familiarity with security frameworks such as CRI, FFIEC, NIST or ISO 27001. 
• Relevant certifications such as CCSP, AWS Security Specialty, Azure Security Engineer, or equivalent. 

Applicants must have legal authorization to work in the United States. We do not offer visa sponsorship at this time.

Compensation

The base pay range for this position is USD $160,000.00/Yr. - USD $220,000.00/Yr. Exact offers will be determined based on job-related knowledge, skills, experience, and location.