{"id":1262648,"url":"https://alion.io/job/fairsquare-cloud-security-manager","title":"Cloud Security Manager","company":{"id":691109,"name":"FairSquare","domain":"fairsquare.com","url":"https://alion.io/company/fairsquare","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Atlanta, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":139000,"max":258000,"currency":"USD","period":"year","gross":null,"usd_annual":258000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EC2","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"AWS Lambda","optional":false},{"name":"CloudFormation","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Lacework","optional":false},{"name":"Least Privilege","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"Python","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Wiz","optional":false}],"status":"live","first_seen_at":"2026-09-25T20:53:24Z","employer_posted_date":"2026-09-25","last_verified_at":"2026-10-01T16:21:38Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Manager of Cloud Security\nFairSquare | Individual Contributor | Reports to: CISO\nLocation: Atlanta, GA (Cumberland/Galleria, near Truist Park)\nHybrid Schedule: Full Time, Monday-Friday, 2-days onsite/3-days remote\nExempt/Salary Range: $139K-258K. Position eligible for additional incentives including bonus, 401(k) match, health and welfare benefits, amazing culture, growth opportunity and more!!\nReporting Structure\nThis position reports directly to the Chief Information Security Officer (CISO). While this is an individual contributor role with no direct reports, the position will interact closely and collaborate regularly with the Director of IT and the Director of Information Security to align cloud security remediation efforts with broader IT operations and security program priorities.\nAbout the Role\nFairSquare is seeking an experienced Manager of Cloud Security to serve as an individual contributor (non-people-management) responsible for the security posture of our AWS cloud environment. This role owns the operationalization of our cloud security tooling - with primary emphasis on the Wiz platform - and drives remediation of findings across audits, penetration tests, and vulnerability assessments. This is a hands-on technical leadership role for someone who wants deep ownership of cloud security outcomes without direct reports.\nWhat You'll Do\nCloud Security Platform Ownership (Wiz / AWS)\nServe as the primary administrator and subject matter expert for the Wiz security platform, including configuration, policy tuning, integrations, and connector health across our AWS accounts and organization structure\nContinuously monitor Wiz findings (CSPM, vulnerability, IAM/entitlement, container, and data security modules) and translate raw findings into prioritized, actionable remediation work\nDevelop and maintain custom Wiz rules, risk scoring adjustments, and dashboards tailored to FairSquare's AWS environment and risk tolerance\nPartner with cloud engineering teams to ensure Wiz coverage extends to new AWS accounts, services, and workloads as the environment grows\nEvaluate and recommend enhancements to Wiz configuration to reduce noise, close coverage gaps, and improve signal-to-action time\nRemediation & Corrective Action Management\nOwn the end-to-end lifecycle of remediating findings surfaced through Wiz, internal/external audits, penetration testing engagements, and vulnerability scanning programs\nTriage and prioritize findings based on exploitability, business impact, and compliance relevance\nBuild corrective action plans (CAPs) with clear ownership, timelines, and validation steps; track them to closure\nWork directly with engineering, DevOps, and infrastructure teams to implement remediations - including IAM policy hardening, misconfiguration fixes, patching coordination, and architecture adjustments\nValidate remediation effectiveness through re-scanning, evidence collection, and control retesting\nMaintain remediation metrics (MTTR, aging findings, recurrence rates) and report trends to the CISO and relevant stakeholders\nAWS Cloud Security\nAssess and improve the security configuration of AWS services (IAM, VPC, S3, EC2, KMS, Lambda, ECS/EKS, RDS, CloudTrail, GuardDuty, Security Hub, Config, etc.)\nSupport secure architecture reviews for new AWS workloads and cloud-native applications\nIdentify and help close gaps between AWS-native security tooling and Wiz coverage\nContribute to least-privilege IAM initiatives, network segmentation, and encryption/key management standards\nAudit, Pen Test & Vulnerability Program Support\nAct as a key technical point of contact for internal/external audits, penetration testing engagements, and vulnerability management programs\nPrepare technical evidence, control narratives, and remediation status for auditors and assessors\nCoordinate with third-party penetration testing vendors on scoping, findings review, and retesting\nHelp mature the vulnerability management program, including scan cadence, SLA definitions, and exception handling processes\nCross-Functional Collaboration\nWork closely with the CISO and broader security team on risk reporting, compliance alignment (e.g., SOC 2, ISO 27001, PCI-DSS, or similar frameworks relevant to FairSquare), and security roadmap priorities\nProvide guidance and security context to engineering teams to help them build secure-by-default in AWS\nContribute to security awareness efforts related to cloud security best practices\nWhat We're Looking For\n Required:\n5+ years of experience in cloud security, with significant hands-on experience securing AWS environments\nDirect, practical experience administering and operationalizing a CNAPP/CSPM platform - Wiz strongly preferred (comparable experience with Prisma Cloud, Orca, Lacework, etc. considered)\nDemonstrated experience managing remediation of findings from audits, penetration tests, and/or vulnerability scans, including driving cross-team accountability to closure\nStrong working knowledge of core AWS services and security controls (IAM, VPC, KMS, S3, CloudTrail, Security Hub, GuardDuty, Config)\nSolid understanding of common vulnerability and misconfiguration classes (excessive permissions, exposed storage/services, insecure network paths, unpatched software, secrets management issues)\nExperience working with compliance/audit frameworks (SOC 2, ISO 27001, PCI-DSS, NIST CSF, or similar)\nAbility to communicate technical risk clearly to both engineers and non-technical stakeholders\nStrong organizational skills to manage multiple concurrent remediation efforts and track them to completion\n Preferred:\nAWS certifications (Security Specialty, Solutions Architect)\nExperience with Infrastructure-as-Code security scanning (Terraform, CloudFormation) within Wiz or similar tooling\nFamiliarity with container/Kubernetes security in AWS (EKS, ECS)\nExperience coordinating directly with external penetration testing vendors and auditors\nScripting/automation experience (Python, AWS CLI, Lambda) to streamline remediation workflows or Wiz integrations\nWhy This Role\nThis is an opportunity to be the primary driver of cloud security outcomes at FairSquare - with direct influence over how our AWS environment is secured, how quickly risk gets reduced, and how our organization matures its relationship with audits and testing programs. You'll have deep platform ownership (Wiz) and a clear mandate to turn findings into fixes, without the overhead of people management.\nAbout FairSquare:\nFairSquare is a non-bank specialty lender operating a family of small business lending brands, including National Funding, National Funding XPRS, and SmallBusinessLoans.com. We provide working capital solutions to small businesses across the U.S. and are backed by a sophisticated capital structure spanning warehouse credit facilities, ABS, and institutional debt. Our finance and operations teams move fast, hold high standards, and value people who bring both subject matter expertise and a collaborative mindset.\nFairSquare is an equal opportunity employer.","description_format":"text","description_chars":7043,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Business & SME Lending"],"lifecycle":[{"event":"open","at":"2026-09-25T21:05:23Z"}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":5,"expected_fill_days":20,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-01T05:45:00Z"},"pay":{"stated_usd_annual":258000,"is_top_pay":true},"html_url":"https://alion.io/job/fairsquare-cloud-security-manager","json_url":"https://alion.io/job/fairsquare-cloud-security-manager.json","meta":{"generated_at":"2026-10-01T18:23:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":714,"day_limit":5000,"remaining_today":4286,"minute_limit":60,"resets_at":"2026-10-02T00:00:00Z"}}}