[Hiring] Senior Cloud Security Engineer @Greystar

Role Description

The Senior Cloud Security Engineer is Greystar's hands-on subject matter expert on cloud security with strategic direction driven from the Senior Director, Information Technology. This role involves defining what "secure" means for Greystar's cloud environments, setting standards, and representing cloud security in architecture design reviews.

This is a builder's role - you'll be writing Terraform, configuring scanners, and fixing findings yourself. You will partner closely with Information Security on enterprise architecture and identity standards, and with Cybersecurity Operations on detection tuning and incident response.

What You Will Do:

• Cloud Security Architecture & Standards
  • Define and own cloud security architecture patterns across cloud platforms.
  • Own cloud Policy as code, including custom policy definitions and enforcement-mode governance.
  • Establish secure-by-default reference patterns in partnership with the Principal Cloud Engineer.
  • Partner with Information Security architecture to translate enterprise security policy into cloud-native controls.
• Application, Pipeline & Supply-Chain Security
  • Build and configure security tooling directly into CI/CD pipelines.
  • Own supply-chain risk review for third-party CI/CD integrations.
  • Work hands-on with application development and AI/ML teams to harden new workloads.
  • Personally triage and remediate critical pipeline findings.
• Identity & Access Security (Cloud-Specific)
  • Define least-privilege RBAC and conditional access standards for cloud resources.
  • Own the just-in-time / privileged identity model for privileged cloud roles.
  • Own recurring access reviews and offboarding validation for service principals and managed identities.
• Detection, Response & Operations
  • Partner with Cybersecurity Operations to tune Defender for Cloud recommendations.
  • Recommend and help prioritize cloud workloads for Sentinel integration.
  • Contribute cloud-specific escalation criteria to the runbooks.
  • Deliver initial and ongoing training to Cybersecurity Operations on cloud-native anomalies.
• Governance, Risk & Compliance
  • Actively work down the CSPM and vulnerability backlog.
  • Map cloud infrastructure controls to relevant compliance frameworks.
• Architecture Review & Technical Authority
  • Serve as the primary cloud security voice in cloud architecture design reviews.
  • Maintain security documentation, reference architectures, and runbooks specific to the cloud estate.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
• 8+ years of experience in cloud security, security architecture, or cloud infrastructure engineering.
• Deep, hands-on experience securing Azure environments.
• Solid working knowledge of AWS security services.
• Experience embedding security into Infrastructure as Code.
• Experience defining and enforcing CI/CD pipeline security gates.
• Expert-level understanding of cloud identity security.
• Experience identifying and triaging cloud-specific security signals.
• Proficiency in scripting and automation for security tooling.
• Excellent executive communication skills.

Requirements

• Experience securing Databricks or data platform environments.
• Experience with container and Kubernetes security.
• Familiarity with securing AI/ML infrastructure.
• Direct experience mapping cloud controls to compliance frameworks.
• Cloud security certifications are a plus but not required.

Benefits

• Competitive Medical, Dental, Vision, and Disability & Life insurance benefits.
• Generous Paid Time off: 15 days of vacation, 4 personal days, 10 sick days, and 11 paid holidays.
• 6-Week Paid Sabbatical after 10 years of service.
• 401(k) with Company Match up to 6% of pay after 6 months of service.
• Paid Parental Leave and lifetime Fertility Benefit reimbursement up to $10,000.
• Employee Assistance Program.
• Critical Illness, Accident, Hospital Indemnity, Pet Insurance and Legal Plans.
• Charitable giving program and benefits.