Cloud Security Engineer

About DRW At DRW, we identify and capture trading and investment opportunities globally. What sets us apart is our diversified approach—trading across many asset classes and instruments, in markets around the world, with horizons from seconds to years. We succeed by leveraging technology, research and risk management. We offer the best of both worlds: the opportunity and spirit of a startup and the benefits and stability of an established, experienced firm. Our employees work hard to solve interesting problems, and their results are rewarded. We value continuous learning—from our outcomes, from the environment and from each other. It’s a place of high expectations, deep curiosity, and constant collaboration, with some of the smartest, most passionate people you’ll meet. // Chez DRW, nous identifions et saisissons les opportunités de négociation et d'investissement au niveau mondial. Ce qui nous différencie, c'est notre approche diversifiée : nous négocions sur de nombreuses classes d'actifs et d'instruments, sur des marchés du monde entier, avec des horizons allant de quelques secondes à plusieurs années. Nous réussissons en nous appuyant sur la technologie, la recherche et la gestion des risques. Nous offrons le meilleur des deux mondes: les opportunités et l'ésprit d’une entreprise en démarrage, et les avantages et la stabilité d'une entreprise établie et expérimentée. Nos employés travaillent dur pour résoudre des problèmes intéressants et leurs résultats sont récompensés. Nous valorisons l'apprentissage continu – de nos résultats, de l’environnement et de chacun de nous. C’est un lieu où les attentes sont élevées, la curiosité est profonde et la collaboration est constante, et où l’on retrouve quelques-uns des individus les plus intelligents et les plus passionnés que vous puissiez rencontrer.

DRW

tradingtechnologyresearchnégociationtechnologieand recherche

D

drw.com/careers

1,001-5,000 employees

Financial Services

Chicago, IL

Privately Held

105k LinkedIn followers

• Review and audit AWS/GCP/Azure environments spanning across multiple business units and recommend changes to reduce risk and improve security.
• Support development and work with technologists across the firm to unify cloud security efforts.
• Integrate services and access routes in a data intensive hybrid cloud environment.
• Provide architectural recommendations and support to ensure cloud and Kubernetes environments are securely deployed, including controls for role-based access, workload identity, network policies, secrets, container images, admission policies, runtime protection, logging, and monitoring.
• Provide recommendations and create working examples of secure hybrid cloud implementations.
• Helping business units across the firm to securely migrate on-premise designed software to the appropriate cloud technologies.
• Stay abreast of new developments in the areas of cloud technology, security, services, and networking.
• Work with vendors and vendor solutions to evaluate products, produce recommendations for the firm, and educate internal clients.
• Have a strong grasp of technologies that can be leveraged across both cloud and on-premise deployments (user supported authorization, etc).
• Identify and analyze vulnerabilities and work with the various business units on remediation.
• Continuously assess and enhance cloud privilege models to ensure least privilege access to data and services.
• Respond to any security related incidents.

• Bachelor’s degree or relevant work experience required.
• Relevant cloud certifications are a plus.
• Strong knowledge of cloud encryption technologies including key management such as (KMS, HSM, etc).
• 5+ years of experience working with Amazon Web Services, with exposure to other cloud vendors such as Google Cloud Platform and Microsoft Azure.
• A strong command of infrastructure-as-code tools such as Terraform, CloudFormation, and related technologies.
• Proficient with containerization and Kubernetes in Linux environments, including Kubernetes architecture, workloads, networking, managed services, security configuration assessment, vulnerability remediation, and automated guardrails using infrastructure-as-code and policy-as-code.
• Proficient with at least one applicable programming language (Python, Go, Javascript, etc).
• Experience with automation in the cloud, in addition to services used in loosely coupled serverless architectures, such as Lambda, SQS, API Gateway, and DynamoDB.
• Knowledge of cloud security best practices and cloud based controls.
• Familiarity with security considerations, capabilities, and regulatory adherence for services across cloud providers.
• Working knowledge of networking in hybrid cloud environments.
• Must work well in a fast-paced, dynamic work environment and have strong work ethic and initiative.
• Proven ability to troubleshoot and resolve production problems while making sensible decisions in times of stress.
• Excellent verbal/written communication skills and documentation/knowledge management skills.
• The annual base salary range for this position is $150,000 USD to $200,000 USD depending on the candidate’s experience, qualifications, and relevant skill set. The position is also eligible for an annual discretionary bonus. In addition, DRW offers a comprehensive suite of employee benefits including group medical, pharmacy, dental and vision insurance, 401k (with discretionary employer match), short and long-term disability, life and AD&D insurance, health savings accounts, and flexible spending accounts.

• Medical Insurance
• Pharmacy Insurance
• Dental Insurance
• Vision Insurance
• 401(k) With Employer Match
• Short-Term Disability Insurance
• Long-Term Disability Insurance
• Life Insurance
• AD&D Insurance
• Health Savings Accounts
• Flexible Spending Accounts
• Annual Discretionary Bonus