Senior Cloud Security Engineer

Description: Company Overview: One Park Financial (OPF) is a leading Financial Technology company dedicated to empowering small businesses by connecting them with flexible financing and funding options. Our mission is to provide entrepreneurs with the working capital they need to elevate their businesses. At OPF, we believe in working with high-performing individuals who are ready to play an integral part in our company's expansion — because our success hinges on our people. Why Join Us? At OPF, we foster a dynamic and inclusive company culture that emphasizes collaboration, innovation, and personal growth. Our team is composed of passionate, driven individuals who are committed to making a difference. Here's what you can expect when you join our team:
• Innovative Environment: Work with cutting-edge technology and be part of a team that is constantly pushing the boundaries of fintech
• Professional Growth: We invest in our employees' growth with continuous learning opportunities, training programs, and career advancement paths
• Supportive Culture: Enjoy a supportive and inclusive work environment where your ideas are valued, and your contributions make a real impact
• Community Focus: Be part of a company that understands the importance of small and mid-sized businesses to their communities and the nation's financial health
• High-Performing Team: Join a team of badasses who are committed to excellence and are integral to our company's expansion and success

About the Role
One Park Financial is seeking a hands-on Senior Cloud Security Engineer to strengthen security across our AWS infrastructure and support daily cybersecurity operations. Your primary focus will be implementing AWS security controls, investigating cloud security events, correcting misconfigurations and excessive permissions, and automating recurring security checks. As part of our Cybersecurity team, you will collaborate with Infrastructure, DevOps, and Development to reduce risk and introduce automated security checks into existing development workflows. This is an engineering role: we value the ability to implement improvements and verify results—not simply identify and report issues.

Key Responsibilities
• Secure AWS infrastructure: Assess and improve security across AWS accounts, identities, networking, storage, and workloads. Address excessive permissions, exposed resources, insecure configurations, and credential-management risks.
• Implement preventive controls: Work with DevOps to strengthen least-privilege access, role-based authentication, account-level guardrails, encryption, and secrets management.
• Improve cloud monitoring: Configure and maintain security logging and detection capabilities using services such as CloudTrail, GuardDuty, Security Hub, and related AWS tools.
• Investigate and respond: Analyze suspicious activity, credential misuse, unauthorized changes, and cloud security incidents. Perform authorized containment actions and escalate critical events immediately.
• Drive remediation: Prioritize cloud vulnerabilities and security findings, coordinate fixes with technical owners, track outstanding risks, and validate completed remediation.
• Support development security: Partner with DevOps to introduce secret detection, dependency scanning, and other agreed security checks into repositories and CI/CD workflows. Help evaluate findings and define remediation requirements; DevOps retains ownership of pipeline implementation, and Development owns code fixes.
• Automate security checks: Build and maintain scripts or workflows for recurring configuration reviews, access checks, monitoring validation, and reporting.
• Provide early-shift coverage: Review the shared security alert queue, verify monitoring health, and investigate or escalate issues using established procedures. Maintain investigation records, runbooks, and remediation evidence, and deliver a clear daily handoff to the Americas team. Requirements
• 5+ years of combined experience in cloud engineering, infrastructure, cybersecurity, or related technical roles, including demonstrated responsibility for securing production AWS environments.
• Strong practical understanding of AWS IAM, least privilege, cloud networking, logging, infrastructure hardening, and credential management.
• Hands-on experience investigating AWS security events and implementing or coordinating corrective actions.
• Practical scripting ability in Python, Bash, or PowerShell. Expertise in all three is not required.
• Working familiarity with Git and CI/CD workflows, along with the ability to collaborate effectively with Infrastructure and DevOps teams.
• Strong troubleshooting, documentation, and professional English communication skills. Ability to work independently, prioritize risk, and make controlled, well-documented changes. Preferred Qualifications
• Experience with multi-account AWS environments, AWS Organizations, Service Control Policies, and infrastructure as code.
• Experience introducing secret scanning, dependency scanning, or other automated security checks into development workflows.
• Familiarity with enterprise identity, endpoint protection, or monitoring platforms such as Okta, Microsoft Entra ID, Active Directory, Microsoft 365, Wazuh, Graylog, or WithSecure. Equivalent platform experience is welcome; expertise in every listed tool is not expected.
• AWS Certified Security
- Specialty or another relevant AWS/security certification. Demonstrated hands-on capability is more important than certifications or familiarity with every product in our environment. Benefits
• Competitive salary
• Health insurance
• Growth and development opportunities
• Dynamic and collaborative work environment
• Company events and team-building activities