Cloud Security Engineer

The Cloud Security Engineer secures Trinity Capital’s cloud and hybrid infrastructure across Azure, AWS, and multi-cloud environments, protecting corporate data, financial systems, and regulated workloads.

The role also shapes company-wide security strategy, including governance of AI and LLM tools, ensuring AI use meets Trinity’s data protection standards and SEC obligations as a public BDC.

This full-time, exempt position reports to the Information Technology Manager and is based on-site at Trinity’s headquarters in downtown Phoenix, AZ.

Duties and Responsibilities

Cloud Infrastructure Security

• Design and manage cloud security controls across Azure, AWS, and multi-cloud using a zero-trust model
• Administer identity and access across Azure and AWS, enforcing least-privilege and just-in-time access
• Build infrastructure-as-code security controls and enforce policy-as-code (Terraform, AWS Config, Azure Policy, OPA)
• Operate cloud-native security tooling (Sentinel, Microsoft Defender, CSPM/CWPP) and harden container and Kubernetes workloads
• Manage data loss prevention across Microsoft 365 and SaaS, and keep backups and disaster recovery tested

Company-Wide Security Program

• Drive Trinity’s enterprise security strategy, roadmaps, and policies with IT leadership
• Run risk assessments, vulnerability scans, and penetration tests; lead remediation and incident response
• Review cloud architecture designs and own endpoint and email security (MAM/MDM, anti-phishing, DKIM/DMARC/SPF)
• Maintain security documentation and serve as internal security subject matter expert

AI Platform Security & Governance

• Own the security framework for Trinity’s AI and LLM deployments
• Set data classification and handling rules for AI tools, and build an AI governance program with Compliance (acceptable use, training)
• Vet third-party AI tools for data residency, retention, and API security, and sign off on new AI use cases

Compliance & Regulatory Requirements

• Support SOX ITGC compliance with evidence over access, change management, and system availability
• Uphold SEC obligations as a public BDC - data protection, records retention, and incident disclosure
• Maintain controls and audit evidence aligned with NIST CSF and ISO 27001

Characteristics

• Analytical mindset with a risk-based approach to security decision-making
• Clear and concise written and verbal communication – able to explain complex security concepts to non-technical stakeholders
• Strong problem-solving skills with the ability to balance security rigor against business agility
• Collaborative across functional groups, including Finance, Legal, Compliance, and Operations
• Highly adaptable; comfortable operating in a fast-paced, growth-oriented financial services environment
• Positive attitude, strong work ethic, and a sense of ownership over outcomes
• Excellent time management with the ability to manage competing priorities and maintain broad situational awareness

Desired Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field
• 7+ years of experience in information security, with at least 3 years focused on cloud security in Azure and/or AWS environments
• Hands-on expertise with Microsoft Azure security services (Entra ID, Defender for Cloud, Sentinel, Purview, Intune, Conditional Access) and securing Microsoft 365
• Solid AWS security fundamentals (IAM, Security Hub, GuardDuty, CloudTrail, SCPs), network security (firewalls, VPNs, NSGs, DNS, ZTNA), and infrastructure-as-code security (Terraform, policy-as-code)
• Experience supporting SOX ITGC audits and/or operating within SEC-regulated environments; familiarity with NIST CSF and ISO 27001
• Proven vulnerability assessment, penetration testing, and remediation, plus experience governing third-party SaaS and AI platforms
• Excellent communication skills, with a track record of translating security risk into business terms for leadership

Physical Requirements

• Ability to sit, stand, talk, utilize a computer, and read computer screens for extended periods of time
• Reliable transportation with the ability to travel locally and nationally as needed
• Maintain consistent, repetitive motion for data entry (typing/clicking)
• Ability to lift up to 20 lbs.

Other

• Minimal travel required (approximately 10%)

Trinity Capital Inc. (NYSE: TRIN) is an international alternative asset manager that seeks to deliver consistent returns for investors through access to private credit markets. Trinity Capital sources and structures investments in well-capitalized growth-oriented companies. With five distinct business verticals — Tech Lending, Equipment Finance, Healthcare & Life Sciences, Sponsor Finance, and Asset Based Lending — Trinity Capital stands as a long-term trusted partner for innovative companies seeking tailored debt solutions. Headquartered in Phoenix, Arizona, Trinity Capital's dedicated team is strategically located across the United States and in Europe.

Trinity is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender expression, gender identity, or any other characteristic protected by law.