Job DescriptionWe're seeking a future team member for the role of Vice President, Cloud Security Engineer to join our Cloud Security team. This role is located in New York.
In this role, you'll make an impact in the following ways:
- Support implementation and continuous improvement of cloud security controls across infrastructure, platform, and application environments in AWS, Azure, or GCP.
- Support enablement of AI for cloud security by promoting AI use cases that improve security outcomes.
- Drive security integration into CI/CD pipelines and infrastructure delivery processes to ensure secure-by-design and secure-by-default deployment models.
- Support implementation efforts for container, Kubernetes, API, and cloud-native workload security controls.
- Drive the operational maturity of Cloud Security Posture Management (CSPM) capabilities to identify misconfigurations, policy violations, excessive permissions, exposed assets, and control drift.
- Partner with engineering and cyber teams to optimize Wiz and similar CSPM/CNAPP platforms, including workflow integration, prioritization, remediation support, and reporting.
- Implement policy-as-code, automated guardrails, and infrastructure-as-code patterns to improve control consistency and reduce manual processes.
- Partner with cloud architects and governance stakeholders to improve standards adoption, exception handling, and control coverage.
- Maintain and improve documentation for cloud security standards, design patterns, engineering procedures, and operating guidance.
To be successful in this role, we're seeking the following:
- 6-10 years of experience in cloud security engineering, security engineering, DevSecOps, infrastructure security, or a related technical security role.
- Proven experience as an AI enabler for cloud security by identifying, assessing, and promoting AI use cases.
- Experience with security automation, orchestration, analytics, and AI-driven security tooling.
- Hands-on experience working with and securing workloads in AWS, Azure, or GCP.
- Working knowledge of cloud security principles across IAM, networking, encryption, logging, secrets management, workload protection, and secure service configuration.
- Experience implementing security controls for cloud-native services and modern application environments.
- Familiarity with Cloud Security Posture Management (CSPM) concepts and tools such as Wiz.
- Experience with cloud-native policy and posture tools, including Azure Policy and Microsoft Defender for Cloud.
- Experience with Infrastructure as Code and automation using tools such as Terraform.
- Exposure to container and Kubernetes security, API security, or vulnerability management is a plus.
- Strong problem-solving, collaboration, and technical communication skills.
- Bachelor's degree in computer science, engineering, cybersecurity, or related discipline, or equivalent practical experience.
- Familiarity with CIS Benchmarks, CSA CCM, OWASP, or NIST CSF.
- Relevant certifications such as AWS Security Specialty, Azure Security Engineer Associate, Google Professional Cloud Security Engineer, or CCSP.
To be successful in this role, we're seeking the following: - Support implementation of cloud security controls across supported cloud platforms.
- Implement and maintain cloud security controls across supported platforms with Cloud native policies, WIZ rules.
- Able to fluently work with KQL, WIZ, Splunk, Azure Policies, bash, Powershell, gcloud, Terraform, Log Analytics, Microsoft Sentinel, Gitlab - All development tools fluently in an enterprise setting.
- Work with platform, DevOps, architecture, and application teams to embed security into engineering workflows.
- Promote adoption of automated controls, secure design patterns, and policy enforcement.
- Contribute to standards adoption, remediation governance, exception handling, and security maturity efforts.
- Implement and support posture management processes across third-party tools as such as WIZ and cloud-native capabilities.
- Support detection, prioritization, and remediation of misconfigurations.
- Act as an AI enabler by identifying opportunities to apply AI to strengthen cloud security outcomes.
- Support implementation of AI capabilities to improve threat detection, posture analysis, risk prioritization, and security operations efficiency.
- Help streamline cloud security tooling, processes, and workflows through intelligent automation and AI-driven insights.
- Promote practical and responsible use of AI as a force multiplier for cloud security effectiveness, scalability, and operational maturity
- Cloud security controls are implemented consistently, effectively, and at scale.
- AI is integrated into all processes and controls in suppor to increase controls effectiveness and streamline operational efforts
- Security is embedded into engineering and deployment workflows with reduced manual effort.
- Posture management findings are better prioritized, more actionable, and more effectively remediated.
- Wiz, cloud-native policies, and automation capabilities work together to improve visibility and reduce cloud risk.
- Cloud control implementations demonstrate alignment to NIST SP 800-53 and enterprise standards.
- Engineering teams adopt secure patterns more consistently with fewer design and control exceptions.
- Governance and audit stakeholders receive clearer technical support, evidence, and remediation transparency.
Our Benefits and Rewards:
BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life's journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.
BNY assesses market data to ensure a competitive compensation package for our employees. The expected base salary for this position when employment commences can be found in the Job Info section at the bottom of the posting.
Base salary offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. Base salary is only part of the total rewards package, which may include eligibility for an annual discretionary incentive award. Subject to the terms and conditions of the applicable plans then in effect, eligible employees may enroll in a 401(k) plan as well as participate in Company-sponsored medical, dental, vision, and basic life insurance plans for the employee and the employee's eligible dependents. Eligible employees also may receive other benefits (including various paid time off benefits, such as vacation and sick time), dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.
If hired, the employee will be in an "at will" position and the Company reserves the right to modify base salary (as well as any other discretionary payments or compensation programs) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.
