Cloud Security Principal Engineer

Ally Financial
Michigan, North Carolina
Workplace: HybridFull timeUSD 110,000 - 180,000 annuallyFunction: Solutions Engineering & Sales EngineeringExperience: 7+ yearsSkills: ["Problem-solving","Communication","Partnership building","Translating complexity","Focus on objectives"]

Own cloud security architecture and governance for SaaS platforms, supporting Ally’s cloud security infrastructure and security projects. Define and mature cloud-focused security policies, controls, and metrics, while troubleshooting and tuning CSPM and related security controls. Lead remediation by identifying security risks, performing health checks and user activity audits, and partnering with teams to improve Ally’s security posture across cloud providers. Also contribute to DevSecOps and CI/CD pipeline security initiatives.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Ally Financial
Ally Financial
5 months ago

Cloud Security Principal Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Own cloud security architecture and governance for SaaS platforms, supporting Ally’s cloud security infrastructure and security projects. Define and mature cloud-focused security policies, controls, and metrics, while troubleshooting and tuning CSPM and related security controls. Lead remediation by identifying security risks, performing health checks and user activity audits, and partnering with teams to improve Ally’s security posture across cloud providers. Also contribute to DevSecOps and CI/CD pipeline security initiatives.
Location: Michigan, North Carolina
Workplace: Hybrid
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Support and mature cloud security infrastructure and security projects for SaaS platforms, including governance processes and technical controls.
  • •Define and maintain cloud-focused security policies and controls (governance, processes, frameworks, and metrics).
  • •Troubleshoot and tune enterprise CSPM and other security controls, including configuration tuning, escalation criteria, and baseline offsets.
  • •Identify security risks, report risks to the IPRM team, and lead remediation efforts to reduce risk.
  • •Perform daily health checks, user activity audits, and engineering work for existing and new security projects, including cloud and DevSecOps/pipeline security.

Pay and Benefits

Salary: USD 110,000 - 180,000 annually
Perks:Health InsuranceDentalVision401kHsaEquity

Key Requirements

  • •7+ years of relevant experience in cloud/security work.
  • •4+ years of experience with cloud platforms (operational experience preferred for AWS, Azure, GCP).
  • •5+ years of experience in information security practices, controls, and governance (CISSP preferred).
  • •Strong programming skills in Python and Terraform, plus automation and Infrastructure as Code experience.
  • •Working knowledge of OWASP Top 10 and LLM/AI security.
Experience:7+ yearsInformation securityCloud securityDevOps
Skills:Problem-solvingCommunicationPartnership buildingTranslating complexityFocus on objectives
Certifications:CISSP
Tech Stack:PythonTerraformTensorFlowPyTorchCSPMDevOpsCI/CDInfrastructure as CodeDevSecOpsAWSAzureGCPOWASP Top 10LLMAI Security

Company Brief

Ally Financial
Provides digital banking, auto financing, and mortgage lending services for consumers and businesses. Ally Financial is known for its online-first banking platform and broad suite of financial products.
Industry: Banking
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Detroit, United States
Founded: 1919
WebsiteLinkedIn