Cloud Security Engineer
DRW is a Chicago-based diversified trading firm that uses technology, quantitative research, and risk management to provide liquidity across traditional and digital-asset markets.
About DRW
Founded by Don Wilson in 1992, DRW trades for its own account across global markets and operates strategies in cryptoassets, venture capital, real estate, carbon markets, and public-equity investments. Its crypto business, Cumberland, has provided institutional crypto-asset liquidity since 2014.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will review and audit AWS, GCP, and Azure environments, recommend security improvements, and help unify cloud security efforts. You will develop secure hybrid-cloud examples, support cloud migrations, assess vulnerabilities, improve privilege models, evaluate vendors, and respond to security incidents.
Requirements
- Bachelor’s degree or relevant work experience
- Strong knowledge of cloud encryption and key management technologies, including KMS and HSM
- 5+ years of experience with Amazon Web Services and exposure to Google Cloud Platform and Microsoft Azure
- Infrastructure-as-code experience with Terraform and CloudFormation
- Containerization and Kubernetes proficiency in Linux environments
- Proficiency in Python, Go, JavaScript, or another applicable programming language
- Cloud automation and serverless architecture experience with Lambda, SQS, API Gateway, and DynamoDB
- Knowledge of cloud security best practices and controls
- Knowledge of hybrid-cloud networking
- Troubleshooting, communication, and documentation skills
Responsibilities
- Review and audit AWS, GCP, and Azure environments and recommend risk-reducing security changes
- Support technologists in unifying cloud security efforts
- Integrate services and access routes in hybrid cloud environments
- Provide secure architecture recommendations for cloud and Kubernetes environments
- Create working examples of secure hybrid-cloud implementations
- Help business units migrate on-premises software to appropriate cloud technologies
- Evaluate vendor solutions and educate internal clients
- Identify vulnerabilities and work with business units on remediation
- Assess and enhance cloud privilege models to enforce least-privilege access
- Respond to security incidents
Benefits
- Annual discretionary bonus
- Group medical, pharmacy, dental, and vision insurance
- 401k with discretionary employer match
- Short- and long-term disability insurance
- Life and AD&D insurance
- Health savings accounts
- Flexible spending accounts