Senior Cloud Security Engineer

Credit Karma•Charlotte, NC

About The Position

Intuit Credit Karma is a mission-driven company, focused on championing financial progress for our more than 140 million members globally. While we're best known for pioneering free credit scores, our members turn to us for everything related to their financial goals, including identity monitoring, applying for credit cards, shopping for insurance and loans (car, home and personal) and savings accounts and checking accounts – all for free. Credit Karma has grown significantly through the years: we now have more than 1,700 employees across our offices in Oakland, Charlotte, Culver City, San Diego, London, Bangalore, and New York City. Banking services provided by MVB Bank, Inc., Member FDIC What You'll Do Lead strategic initiatives to mitigate and remediate infrastructure security risk across the organization Implement & Instrument security controls and tooling across cloud infrastructure to uplevel the security posture, focusing on vulnerability management, container security, and supply chain security. Work on a cloud native environment leveraging Containerized Workloads, Serverless Architecture and Automated CICD Pipeline to manage Infrastructure-as-a-Service Perform Scripting and Coding to build security tooling and for automating redundant tasks. Use terraform to deploy security baseline controls, perform code reviews, and provide recommendations for improved security. Research and advocate new technologies, architectures, and security products that will support security strategies, patterns, and standards and help address new threat vectors Develop and maintain Agentic AI solutions to automate known vulnerability findings remediations, and maintain security guardrails for pre-merge validation. Enhance monitoring on user activity and enforce the principle of least privilege for all identities running within the cloud. Define, document and implement security standards, guidelines and procedures for secure operations in a cloud infrastructure environment. Be part of the On-Call Support for addressing security tickets and serve as a Security System SRE on a rotational basis Collaborate with engineering and operations teams toward implementing controls and processes that address identified gaps Identify and remediate security vulnerabilities and incidents What We're Looking For: BS or equivalent. Minimum of 6+ years of experience in security engineering.

Requirements

BS or equivalent. Minimum of 6+ years of experience in security engineering.
Experience with Applied Generative AI (LLMs/Agents) for security automation.
Experience with building scalable cloud security solutions that are well instrumented
Proven track record in Supply Chain Security, DevSecOps Automation and Vulnerability Management
Skilled in Python, Go and programming automation.
Deep technical expertise on public cloud environments like GCP, AWS and Azure
Effective communication and interpersonal skills to collaborate with stakeholders across organization and provide guidance on security architecture
Experience presenting technical security content to a large group and leadership.

Responsibilities

Lead strategic initiatives to mitigate and remediate infrastructure security risk across the organization
Implement & Instrument security controls and tooling across cloud infrastructure to uplevel the security posture, focusing on vulnerability management, container security, and supply chain security.
Work on a cloud native environment leveraging Containerized Workloads, Serverless Architecture and Automated CICD Pipeline to manage Infrastructure-as-a-Service
Perform Scripting and Coding to build security tooling and for automating redundant tasks.
Use terraform to deploy security baseline controls, perform code reviews, and provide recommendations for improved security.
Research and advocate new technologies, architectures, and security products that will support security strategies, patterns, and standards and help address new threat vectors
Develop and maintain Agentic AI solutions to automate known vulnerability findings remediations, and maintain security guardrails for pre-merge validation.
Enhance monitoring on user activity and enforce the principle of least privilege for all identities running within the cloud.
Define, document and implement security standards, guidelines and procedures for secure operations in a cloud infrastructure environment.
Be part of the On-Call Support for addressing security tickets and serve as a Security System SRE on a rotational basis
Collaborate with engineering and operations teams toward implementing controls and processes that address identified gaps
Identify and remediate security vulnerabilities and incidents