About DTCC
DTCC provides secure, reliable technology solutions and high-quality information that support the global capital markets.
Responsibilities
•Operate and support cloud security platforms and services across AWS, Azure, and GCP, including CSPM, CNAPP, vulnerability management, compliance monitoring, and identity security solutions
•Investigate and analyze cloud security findings, vulnerabilities, misconfigurations, and compliance gaps, and assist with remediation in partnership with application and infrastructure teams
•Implement and maintain cloud security controls, baselines, monitoring capabilities, and security automation solutions
•Develop and enhance scripts, workflows, and automation to improve operational efficiency, security coverage, and response times
•Create and maintain technical documentation, operational procedures, runbooks, and knowledge articles for cloud security operations
•Participate in incident response, troubleshooting, root cause analysis, and continuous improvement activities related to cloud security services
•Perform additional responsibilities beyond those listed
Requirements
•Experience securing cloud environments in AWS, Azure, and/or GCP
•Hands-on experience with CSPM, CNAPP, vulnerability management, and security tooling such as Wiz, Qualys, CrowdStrike, AquaSec, or similar platforms
•Knowledge of cloud identity and access management, security monitoring, and compliance practices
•Experience identifying, investigating, and remediating security risks, vulnerabilities, and cloud misconfigurations
•Familiarity with cloud security frameworks and standards such as NIST, CIS Benchmarks, and ISO 27001
•Experience with automation and scripting using Python, PowerShell, Bash, Terraform, or similar technologies
•Ability to learn and manage new technologies
•Strong analytical, troubleshooting, communication, and problem-solving skills
Nice to have
•A bachelor's degree or equivalent experience
•An industry-recognized cybersecurity or cloud certification such as Security+, AWS Security Specialty, Azure Security Engineer, CCSP, or CISSP
Conditions
•Competitive compensation, including base pay and annual incentive
•Comprehensive health and life insurance and well-being benefits
•Pension
•Paid time off, personal/family care, and other leaves of absence
•Flexible/hybrid schedule: 3 days onsite and 2 days remote; onsite Tuesdays, Wednesdays, and a third day of your choosing
•Training and development opportunities
