{"id":3182737,"url":"https://alion.io/job/popular-cloud-security-engineer","title":"Cloud Security Engineer","company":{"id":2750784,"name":"Popular","domain":"popular.com","url":"https://alion.io/company/popular-com","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":111000,"max_usd":215000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1306},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Akamai","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bash","optional":false},{"name":"C#","optional":false},{"name":"Checkmarx","optional":false},{"name":"Chef","optional":false},{"name":"CI/CD","optional":false},{"name":"Git","optional":false},{"name":"GitHub","optional":false},{"name":"GitLab","optional":false},{"name":"gRPC","optional":false},{"name":"IAM","optional":false},{"name":"JavaScript","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Open Policy Agent","optional":false},{"name":"OWASP","optional":false},{"name":"Packer","optional":false},{"name":"PowerShell","optional":false},{"name":"Puppet","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Rest API","optional":false},{"name":"Ruby","optional":false},{"name":"SOAP","optional":false},{"name":"SoapUI","optional":false},{"name":"SQL","optional":false},{"name":"STRIDE","optional":false},{"name":"Swagger","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Veracode","optional":false}],"status":"closed","first_seen_at":"2026-10-23T22:11:30Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-24T21:55:02Z","board_verified":false,"closed_at":"2026-10-24T21:55:02Z","days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"Cloud Security Engineer\nResponsible for analysis, design and implementation coordination for tool and service designs within the cloud security & identity domain.\nGeneral Description\nThe Cloud Security Engineer role, key responsibilities would include securing software built and maintained by Popular. The Cloud Security Engineer role will work closely with in-house software development teams and vendors/third-party organizations to ensure that security, privacy, and compliance requirements are planned for, designed, and built into software applications. In addition to securing software, The Cloud Security Engineer role will be expected to understand cloud computing principles, including virtualization, containerization, microservices and serverless computing. Risk management, security, container security, Kubernetes security, IAM security, network security, encryption, secrets management, data protection & securing CI/CD. It’s key to maintain industry and cyber knowledge to optimize and align Popular’s application security processes and systems throughout the Software Development Lifecycle.\nEssential Duties and Responsibilities\nComplete hands-on experience with Terraform, Packer, Ansible, Json for hardening images and CI/CD pipelines\nDeep knowledge of securing API’s and Microservices platform\nSupport the configuration and maintenance of API discovery, classification, and monitoring within Akamai API Security to ensure externally exposed APIs are properly identified and assessed for risk.\nTune Akamai API Security platform detection rules, policies, and alert thresholds to reduce false positives while maintaining visibility into high-risk API activity.\nPerform periodic health checks of the Akamai API Security platform, including connector status, data ingestion, coverage validation, and policy effectiveness.\nHands on experience with IAM ‘Policy as code’; OPA (Open Policy Agent); Cedar - AWS opensource policy agent.\nManage and govern cloud identity and access management controls across Cloud technologies and related cloud environments to support least privilege, secure access, and compliance requirements. (Azure, AWS)\nExpertise in Dev-Ops, CI/CD and full life cycle management\nExperience working in DevSecOps, including knowledge and experience enforcing a secure software development lifecycle. (Github,Gitlab,Jenkins,Ansible,Chef,Puppet)\nExperience using scripting languages (Python,Powershell,Bash etc) to parse machine generated data, interact with REST APIs and automate repetitive tasks\nIdentify solutions for common security problems while participating as a security specialist in an agile Application Security team.\nWork on security reviews, building relationships with software architects, developers, and engineers.\nDesign and develop accelerators, security APIs, pipeline security automation.\nDevelop, enhance, and maintain security automation capabilities that support IAM governance, access control enforcement, and compliance monitoring.\nDevelop and embed secure design patterns, coding standards, education, and culture into the development community.\nBuild, deploy, and automate comprehensive application security testing capabilities.\nApplication security assessments, including code reviews, architecture reviews, threat modeling, and penetration testing.\nSupport remediation of IAM risks across Cloud technologies such as, but not limited to, SaaS, PaaS and IaaS technologies.\nAct as an advocate and resource for secure software development and application security practices in all application life cycle phases.\nPromote API security design principles and perform API security reviews.\nAssists cyber incident triage, including determining scope, urgency, and potential impact, identifying the application code's specific vulnerability. Makes recommendations that enable expeditious remediation.\nAssist with audit, compliance, and risk management activities by gathering evidence, explaining IAM control design, and demonstrating how cloud access is governed and monitored.\nKnowledge and Skills\nYou are either a security-oriented software engineer who has been building software under agile processes or a security professional who wants to get closer to development and engineering.\nStrong background in developing, validating, and maintaining automated security controls and guardrails that enforce security requirements across cloud platforms. (AWS, Azure, Salesforce, etc.)\nAbility to develop and maintain security requirements, architecture guidance, standards, implementation requirements, service baselines, and operational documentation.\nKnowledge and understanding programming languages and the ability to understand code is essential. (Python, Bash/Shell, Go, YAML/JSON, Git, Ruby, SQL)\nWorking knowledge developing and securing web APIs and web applications: REST, SOAP, gRPC.\nDirect hands-on skillsets with security testing of web services and web APIs.\nHands-on experience using Terraform to define, deploy, secure, and manage cloud infrastructure through Infrastructure as Code practices.\nHands-on experience with CI/CD tools such as GitLab, Jenkins, Nexus, Harness, Artifactory, or comparable substitutes.\nStrong knowledge of leveraging various application security testing tools in the areas of SAST, DAST, IAST & SCA such as Veracode, Qualys WAS, Checkmarx, Gitlab, DevTools, or various other commercial standard offerings for application security testing and analysis.\nStrong background in integrating security controls into several areas in the SDLC process, including automation into a CI/CD pipeline.\nStrong skillsets leveraging secure development frameworks and best practices like OWASP, STRIDE.\nWorking knowledge of Swagger, Azure DevOps, SOAPUI, POSTMAN, and Visual Studio.\nUnderstanding of APIs, security and standard flows (OAuth, OpenIDConnect).\nAdvanced skillsets support an engineering focused approach to solving common security problems.\nDirect hands-on experience with leading threat modeling exercises for applications and services.\nEducation/Experience\nBachelor’s degree in computer science, Software engineering, Information Systems or related field.\nAt least five years of experience in security aspects of software engineering.\nKnowledge with key application security tools, such as, Veracode, Qualys WAS, Checkmarx, Gitlab, Etc.\nWorking knowledge of Swagger, Azure DevOps, SOAPUI, POSTMAN, Visual Studio.\nStrong knowledge of .Net, C#, Javascript, AngularJS and related languages.\nKnowledge with Team Foundation Server and / or Visual Studio Team Servers.\nKnowledge of security risks and risk rating methodology.\nKnowledge of cloud architecture - IaaS, PaaS, and SaaS.\nCurrent and prior experience with Salesforce Shield suite of security tools such as platform encryption, event monitoring, and field-level audit trails.\nPreferred Certifications and Licenses\nTo qualify for the role, candidates shall have a Specialization Certification (preferred) and a minimum one (1) Base Certification:\nBase Certifications:\nSuch as CISSP, CCSK, CCSP.\nSpecialization Certifications:\nSuch as CISM, AWS, CCSK, CCSP.\nImportant: The candidate must provide evidence of academic preparation or courses related to the job posting, if necessary.\nOur hybrid workplace model is a flexible benefit designed to support the evolving needs of our organization and team members. As priorities and circumstances change, work arrangements may be adjusted to ensure alignment with organizational goals and employee well-being.\nABOUT US\nPopular is Puerto Rico’s leading financial institution and have been evolving since it was founded over a century ago. From a small bank it has developed into a large corporation that offer a wide variety of services and financial solutions to our customers, with presence in the United States, the Caribbean and Latin America.\nAs employees, we are dedicated to making our customers dreams come true by offering financial solutions in each stage of their life. Our extensive trajectory demonstrates the resiliency and determination of our employees to innovate, reach for the right solutions and strongly support the communities we serve; therefore, we value their diverse skills, experiences and backgrounds.\nWe reaffirm our commitment to always offer essential financial services and solutions for our customers and communities, including during emergency situations and/or natural disasters. Popular’s employees are considered essential workers, whose role is critical in the continuity of these important services even under such circumstances. By applying to this position, you acknowledge that Popular may require your services during and immediately after any such events.\nIf you have a disability or need more information about requesting an accommodation, please contact us at . This email inbox is monitored for such types of requests only. All information you provide will be kept confidential and will be used only to the extent required to provide needed exemptions or reasonable accommodations. Any other correspondence will not receive a response.\nAre you ready for a rewarding career?\nPopular is an Equal Opportunity Employer, including Disability/Vets. Popular is a Drug Free Workplace\nLearn more about us at www.popular.com and keep updated with our latest job postings at www.jobs.popular.com.\nConnect with us!\nLinkedIn | Facebook | Twitter | Instagram\nIf you are a California resident, please click here to learn more about your privacy rights.","description_format":"text","description_chars":9489,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Financial Services"],"lifecycle":[{"event":"open","at":"2026-10-23T22:11:30Z"},{"event":"close","at":"2026-10-24T21:55:02Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/popular-cloud-security-engineer","json_url":"https://alion.io/job/popular-cloud-security-engineer.json","meta":{"generated_at":"2026-10-25T13:28:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19135,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2750784},"rest":"https://alion.io/mcp/rest/get_company?id=2750784"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpopular-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpopular-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpopular-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/popular-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpopular-cloud-security-engineer"}]}