Cloud Security Principal Engineer

Ally Bank•Charlotte, NC

About The Position

The Cloud Security Principal Engineer is a member of Ally Financial’s Information Protection and Risk Management team, working with colleagues across the IPRM program to identify, manage, and mitigate security risks. As part of a broader team of security engineers reporting to the Sr. Director, Cloud Security, this role develops, deploys, and integrates technical controls and tools, and defines processes and standards to maintain security configurations and tools. The project-focused position centers on designing and implementing technologies and governance processes for SaaS platforms, with the potential to transition into a longer-term engagement to mature and improve the SaaS security service. The role supports existing cloud security infrastructure and security projects, with potential work involving the DevOps toolchain, cloud automation, SaaS posture management, AI, and other technologies. It defines and matures cloud security policies and controls, operates and troubleshoots the enterprise CSPM platform and other security controls, identifies risks and leads remediation with the IPRM team, and partners with technical leaders and project teams to strengthen cloud and application security.

Requirements

7 or more years of relevant experience.
Bachelor’s degree in relevant field(s) of study or equivalent.
Ability to build partnerships, translate complex topics into simple terms, and maintain focus on objectives.

Nice To Haves

Demonstrated technical expertise in two or more technology areas, such as compute, storage, network, or data.
Experience as a software developer, with knowledge of automation, Infrastructure as Code, and DevOps, CI/CD tools, and processes.
Strong programming skills in Python and Terraform, and experience with frameworks such as TensorFlow and PyTorch.
5 or more years of experience in information security practices, controls, and governance; CISSP preferred.
5 or more years of experience as a technical resource within an IT organization; enterprise or matrixed organization experience preferred.
4 or more years of experience with cloud platforms; operational experience with AWS, Azure, GCP, or similar platforms preferred.
Technical expertise or working knowledge of the OWASP Top 10, LLM, and AI security.

Responsibilities

Support existing cloud security infrastructure and security projects, with potential to take on responsibilities involving the DevOps toolchain, cloud automation, SaaS posture management, AI, and other technologies.
Define and mature cloud-focused security policies and controls, including governance, processes, frameworks, and metrics.
Manage day-to-day troubleshooting of the enterprise CSPM platform and other security controls, including configuration tuning and defining and executing escalation criteria.
Work with Security teams to tune control systems to meet business needs.
Identify security risks, report them with the IPRM team, and lead remediation efforts.
Perform architecture and engineering responsibilities for existing technologies and new security projects.
Perform daily, weekly, and monthly health checks and user activity audits, and determine baseline offsets.
Identify, implement, and operationalize security technologies and processes to improve visibility and reduce risk.
Partner with technical leaders to refine and mature Ally’s security posture for cloud-based technologies and platforms and to mature application security capabilities.
Consult with project teams to ensure platform architectures have appropriate security controls, particularly for cloud provider and SaaS engagements.
Support cloud platform security and DevSecOps/pipeline security.

Benefits

20 paid time off days, 11 paid holidays, and 8 hours of annual volunteer time off; amounts are prorated based on start date, and the program varies by employment status and management level.
401(k) retirement savings plan with matching and company contributions.
Student loan pay-down and 529 education savings assistance programs.
Tuition reimbursement.
Employee stock purchase plan.
Financial learning center and financial coach access.
Medical, dental, and vision insurance options.
Life insurance and short- and long-term disability coverage.
Health Savings Account with employer contributions and Healthcare FSA.
Critical illness, accident, and hospital indemnity insurance.
Total well-being program.
Adoption, surrogacy, and fertility assistance.
Paid parental and caregiver leave.
Dependent Day Care FSA, backup child and adult/elder care days, and childcare discounts.
Employee Assistance Program.
Subsidized and discounted Weight Watchers program and other employee discount programs.
Potential travel allowances, relocation assistance, signing bonus, and/or equity, depending on the role.
Annual incentive plan eligibility.