Cloud Security Principal Engineer

Ally•Detroit, MI

68d•$110,000 - $180,000

About The Position

The Cloud Security Principal Engineer is part of Ally Financial’s Information Protection and Risk Management team and works with the broader IPRM program to identify, manage, and mitigate security risks. The role is part of a team of security engineers reporting to the Sr. Director, Cloud Security, and is responsible for developing, deploying, and integrating technical controls and tools, as well as defining processes and standards that maintain secure configurations and tools. This project-focused position centers on designing and implementing technologies and governance processes for SaaS platforms, with the potential to transition into a longer-term engagement supporting and improving the SaaS security service. The engineer supports existing cloud security infrastructure and security projects, with potential work involving DevOps toolchains, cloud automation, SaaS posture management, AI, and other technologies. The position involves cloud security policy and control development, platform troubleshooting and tuning, risk remediation, security architecture and engineering, operational health checks, and collaboration with technical leaders and project teams to mature cloud and application security capabilities.

Requirements

At least 7 years of relevant experience.
Bachelor’s degree in relevant field(s) of study or equivalent.
At least 5 years of experience in information security practices, controls, and governance.
At least 5 years of experience as a technical resource within an IT organization.
At least 4 years of experience with cloud platforms.

Nice To Haves

Technical expertise in two or more technology areas, such as compute, storage, network, or data.
Experience as a software developer, with knowledge of automation, Infrastructure as Code, and DevOps and CI/CD tools and processes.
Strong programming skills in Python and Terraform, and experience with frameworks such as TensorFlow and PyTorch.
CISSP certification.
Experience in an enterprise or matrixed organization.
Operational experience with cloud platforms such as AWS, Azure, or GCP.
Working knowledge of the OWASP Top 10 for LLM and AI Security.
Ability to build partnerships, explain complex topics in simple terms, and maintain focus on objectives.
Knowledge of processes and procedures, standards and policies, and architectures.

Responsibilities

Support existing cloud security infrastructure and security projects, with potential responsibilities involving DevOps toolchains, cloud automation, SaaS posture management, AI, and other technologies.
Define and mature cloud-focused security policies and controls, including governance, processes, frameworks, and metrics.
Manage day-to-day troubleshooting of the enterprise CSPM platform and other security controls, including configuration tuning, troubleshooting, and defining and executing escalation criteria.
Work with Security teams to tune control systems to meet business needs.
Identify security risks and work with the IPRM team to report them and lead remediation efforts.
Perform architecture and engineering responsibilities for existing technologies and new security projects.
Perform daily, weekly, and monthly health checks and user activity audits, and determine baseline offsets.
Identify, implement, and operationalize security technologies and processes to improve visibility and reduce risk.
Partner with technical leaders across the organization to refine and mature Ally’s security posture for cloud-based technologies and platforms and to mature application security capabilities.
Consult with project teams to ensure platform architectures have appropriate security controls, particularly for cloud provider and SaaS engagements.

Benefits

At least 20 paid time-off days, 11 paid holidays, and 8 hours of annual volunteer time off; amounts may vary based on start date, employment status, and management level.
401(k) retirement savings plan with matching and company contributions.
Student loan pay-down and 529 educational savings assistance programs.
Tuition reimbursement.
Employee stock purchase plan.
Financial learning center and financial coach access.
Medical, dental, and vision insurance options.
Employee, spouse, and child life insurance.
Short- and long-term disability insurance.
Health Savings Account with employer contributions and Healthcare FSA.
Critical illness, accident, and hospital indemnity insurance.
Total well-being program.
Adoption, surrogacy, and fertility assistance.
Paid parental and caregiver leave.
Dependent Day Care FSA, backup child and adult/elder care days, and childcare discounts.
Employee Assistance Program.
Subsidized and discounted Weight Watchers program and other employee discount programs.
Depending on the role, travel allowances, relocation assistance, a signing bonus, and/or equity may be available.
Annual incentive plan eligibility.