Staff Cloud Security Engineer (Fintech)

Location: Must be based in Chicago, IL. Hybrid schedule: In-office Tuesday through Thursday.

Salary: $145,000 - $195,000 USD + 12% annual target bonus

Company

Industry-leading retail trading platform and futures broker empowering over 2 million users worldwide.

What you will do

• Own cloud security architecture across GCP, including IAM, VPC Service Controls, and Workload Identity.
• Design and tune edge defenses using Cloudflare (WAF, Zero Trust, Bot Management) and Google Cloud Armor.
• Lead threat modeling and security architecture reviews for new services and platform changes.
• Implement security guardrails as code via Terraform and CI/CD security controls.
• Enhance cloud detection and response by partnering with SOC and Incident Response teams.
• Translate regulatory requirements (ISO, SOC 2, SOX) into scalable technical controls.

Requirements

• Must be based in Chicago, IL (not open to remote candidates).
• 8+ years of experience in security engineering, with 5+ years focused on production cloud security.
• Deep hands-on expertise with GCP (IAM, Networking, Security Command Center, KMS).
• Production experience with Cloudflare and Google Cloud Armor.
• Strong Infrastructure-as-Code skills using Terraform.
• Proficiency in Python or Go for automation.

Nice to have

• Certifications such as Google Professional Cloud Security Engineer, CISSP, or GCP Professional Cloud Architect.
• Experience securing GKE/Kubernetes and software supply chains.
• Multi-cloud experience (AWS, Azure).
• Previous experience in fintech, payments, or highly regulated financial environments.

Culture & Benefits

• 401k plan with 3.5% company match.
• Generous PTO (23 days per year) plus 7 paid holidays.
• Hybrid work flexibility: remote Mondays/Fridays, plus 20 additional flex remote days and 5 office-optional weeks.
• Comprehensive Health, Vision, and Dental coverage.
• 100% company-covered Life and Disability Insurance.
• Paid Parental Bonding Leave and annual Service Day.