Cloud Security Engineer

Role: Cloud Security Engineer

MoonPay’s Security Team strengthens cloud infrastructure on GCP and AWS through threat modeling, security reviews, and automated controls. The role focuses on managing cloud security posture, improving monitoring and incident response, and embedding security best practices across the infrastructure lifecycle.

Responsibilities

• Perform threat modeling for architectural infrastructure changes, new cloud infrastructure, and Kubernetes deployments on GCP and AWS.
• Design, implement, and manage security controls and secure configurations for GCP and AWS.
• Develop and maintain secure Infrastructure as Code (IaC) using Terraform and related tooling.
• Implement and enhance cloud security monitoring using Datadog, including alert configuration and response procedures (not just relying on OOTB rules).
• Implement and manage Just-in-Time (JIT) access for elevated privilege cloud access.
• Establish and lead the cloud incident management process.
• Research emerging cloud threats and define mitigation strategies; support engineering teams with security training.

Required / Key Experience

• Strong expertise in cloud security for GCP and AWS.
• Practical experience with threat modeling and securing cloud-native infrastructure.
• Hands-on ability to manage security controls and configurations in production cloud environments.
• Experience with Terraform for security-focused IaC.
• Experience with Datadog for cloud security monitoring and alerting.
• Knowledge of JIT access concepts and implementation for privileged access.

Nice-to-Haves

• Experience with Kubernetes security.
• Ability to drive security standards, baselines, and training across engineering teams.