Senior Cloud Security Engineer - Application & Platform Security - Boston

Boston, MAHybridFull Time$175k - $200kJob DescriptionA respected global investment management firm is seeking a Senior Cloud Security Engineer to join its technology risk and cybersecurity organization. The firm has a long-standing reputation for active investment management, fundamental research, and global collaboration, supported by a sophisticated technology ecosystem spanning cloud infrastructure, investment applications, analytics platforms, and enterprise services.As a Senior Cloud Security Engineer, you will focus on securing cloud-hosted applications and platforms used by investment professionals, researchers, and business teams worldwide. Unlike traditional cloud security roles that concentrate on infrastructure hardening, governance, or threat detection, this position is centered on application security within cloud environments. You will work directly with software engineering teams to identify security risks early in the development lifecycle and ensure cloud-native applications are designed, built, and deployed securely.In this role, you will lead initiatives involving secure software development, cloud application protection, API security, and security testing automation. You will help establish security standards across modern application architectures, review new services before production deployment, and develop tooling that enables engineering teams to identify and remediate vulnerabilities independently. The ideal candidate enjoys working closely with developers and views security as a product-enabling function rather than a compliance exercises.Required Skills & ExperienceExperience securing cloud-native applications in AWS and/or AzureStrong understanding of application security principlesExperience with Secure SDLC methodologiesKnowledge of API security, authentication, and authorization frameworksExperience with SAST, DAST, SCA, and application security testing toolsUnderstanding of OWASP Top 10 and common web application vulnerabilitiesExperience securing CI/CD pipelines and deployment workflowsProficiency in Python, Java, C#, or similar programming languagesFamiliarity with microservices and distributed application architecturesKnowledge of container technologies and KubernetesDesired Skills & Experience5+ years of cybersecurity, application security, or cloud security experienceExperience working with enterprise software development teamsFinancial services or asset management experienceExperience implementing security champions programsFamiliarity with API gateways and cloud application firewallsExperience with secrets management platformsSecurity certifications such as CSSLP, CISSP, CCSP, or GIAC certificationsBachelor's degree in Computer Science, Cybersecurity, Engineering, or related fieldWhat You Will Be DoingDaily Responsibilities100% Hands OnConduct security reviews for cloud-based applications and servicesPartner with development teams to identify and remediate security vulnerabilitiesImplement application security tooling within development and deployment pipelinesPerform threat modeling exercises for new cloud initiatives and business applicationsDevelop security standards and reusable patterns for cloud-native developmentAssess application architectures for potential security weaknesses and design flawsAutomate application security testing and vulnerability validation processesImprove API security controls and authentication mechanismsSupport remediation efforts for findings identified through penetration testing and security assessmentsEducate engineering teams on secure coding best practices and emerging application security threatsThe OfferBonus OR Commission eligibleYou will receive the following benefitsMedical InsuranceDental BenefitsVision BenefitsPaid Time Off (PTO)401(k) (including match, if applicable)Applicants must be currently authorized to work in the US on a full-time basis now and in the future.