Senior Cloud Security Engineer - InfoSec

Role overview

Mercury is hiring a Senior Cloud Security Engineer (InfoSec) to design the security systems, guardrails, and automation that let the company scale securely. You’ll be a go-to expert partnering across teams to address security, privacy, and compliance challenges without slowing engineering.

Responsibilities

• Build and define cloud security posture.
• Enable cyber resilience and support zero trust initiatives.
• Apply Governance, Risk, and Compliance (GRC) practices to cloud engineering.
• Improve reliability and security of Mercury’s cloud infrastructure in collaboration with infrastructure and engineering teams.
• Automate cloud security controls to minimize threats, vulnerabilities, and risk.
• Shape AWS cloud architecture around resilience, least privilege, and long-term maintainability.
• Help teams address remote access challenges in a remote-first environment.
• Partner with stakeholders to resolve security concerns in the cloud.

Requirements

• 5+ years experience in cloud security, networking, information security, or related fields.
• Strong learning mindset and proven track record of growth.
• Familiarity with security and privacy frameworks/regulations, including: NIST CSF, FFIEC, SOX, SOC 2, GLBA, ISO27018, PCI-DSS (and similar).
• Deep problem-solving/analytical skills; able to remain calm and competent under high pressure.
• Fundamental understanding of security practices, troubleshooting, attack vectors, and customer support.
• Familiarity with Infrastructure as Code (IaC) tooling.
• AWS certifications encouraged.

Compensation

• Base salary and equity (stock options/RSUs) plus benefits.
• Target base salary ranges:
  • US: $166,600–$208,300
  • Canada (CAD): CAD 157,400–196,800

Location

• United States (any location for US employees).