Senior Security Engineer (Cloud Engineer)

This is a hybrid role. At Bluevine, we pride ourselves on our collaborative culture, which we believe is best maintained through in-person interactions and a vibrant office environment. All of our offices have reopened in accordance with local guidelines, and are following a hybrid model. In-office days will be determined by location and discipline.

Bluevine is looking for a Senior Cloud Information Security Engineer to join our Security team and take a key role in securing our cloud infrastructure and production environments.

What You'll Do:

• Own and drive the design, implementation, and long-term ownership of cloud security controls and architectures (AWS preferred), applying security-by-design principles
• Continuously assess and improve cloud security posture through vulnerability management and risk assessments
• Design and manage IAM roles, policies, and access models across cloud environments
• Design, implement, and manage firewall and WAF policies for cloud applications and network perimeters
• Own cloud-related security incident investigations and response efforts
• Partner closely with DevOps and R&D to embed security into architecture and deployment processes
• Define and evolve cloud security standards, policies, and best practices
• Drive complex security initiatives end-to-end, from design through long-term ownership

What We Look For:

• 5 + years of experience in Information Security, with a strong focus on cloud and infrastructure security, including hands-on experience with a major Cloud IaaS provider (AWS Mandatory)
• Deep hands-on experience with Linux systems
• Strong networking expertise, including troubleshooting across all OSI layers
• Deep understanding of modern cloud-based applications and APIs (HTTP/S, PKI, microservices, load balancers, firewalls, WAF), with hands-on experience operating security platforms such as WAFs, LBs, VPNs, vulnerability scanners, and directory services
• Strong passion for security automation, with scripting experience (Bash and/or Python)
• Solid understanding of risk assessment and the ability to clearly communicate security and privacy considerations to technical and non-technical stakeholders
• Independent, proactive, and self-driven, with a strong ownership mindset