Principal Cloud Security Engineer

Responsibilities

• Own the overall security posture of the Grand Central Platform, including IPaaS and AI Agentic platforms.
• Act as the security representative for the team by conducting threat modeling, vulnerability testing, and risk analysis.
• Design, implement, and maintain secure cloud infrastructure and controls within Azure environments.
• Enforce "secure by design" principles and collaborate with architects on new platform components.
• Design and enforce least privilege access and secure authentication mechanisms (IAM).
• Embed security into CI/CD pipelines using DevSecOps methodologies and automate compliance checks.
• Maintain security monitoring tools such as SIEM, CSPM, and EDR to investigate threats and manage incident response.
• Mentor team members and contribute to the growth of the company's security capabilities.

Requirements

• 8+ years of hands-on experience in cloud security, DevSecOps, or cloud engineering.
• Deep expertise in Azure cloud security architecture and services.
• Strong experience with Azure AD, RBAC, PIM, and Conditional Access.
• Expertise in Terraform or OpenTofu for Infrastructure as Code (IaC) security automation.
• Experience with security monitoring tools including SIEM, CSPM, and EDR (e.g., Azure Sentinel, Defender for Cloud).
• Proficiency in scripting and automation using Python, Go, or Bash.
• Solid networking knowledge, including firewalls, VPN, VNET, and WAF.
• Familiarity with security compliance standards such as NIST, CIS, ISO 27001, or SOC 2.
• Knowledge of LLM/AI system vulnerabilities, such as prompt injection and adversarial attacks.

Preferred Qualifications

• Offensive security experience is a significant plus.
• Demonstrated ability to resolve security issues across both traditional and AI-based systems.

About the Company

Backbase is a leading engagement banking platform that helps financial institutions engage customers through digital-first experiences. We focus on building robust, secure, and scalable ecosystems for the modern banking era.