Senior Security Engineer (Cloud Engineer)

Overview

Bluevine is the largest small business banking platform in the U.S., redefining how entrepreneurs manage their money. We create modern financial solutions, from checking and lending to payments and beyond, designed to help small business owners grow, thrive, and take control of their financial future. Our best-in-class technology, advanced security, and deep understanding of the small business community give our customers the confidence to focus on what they do best.

Since 2013, we’ve supported more than 750,000 small businesses nationwide. Backed by leading investors like Lightspeed Venture Partners, Menlo Ventures, 83North, and Citi Ventures, our 500+ person global team shares one mission: to give small businesses the financial tools they need to succeed.

We’re innovators driven by big ideas, collaboration, and real impact. Here, you’ll have the freedom to take ownership, grow your career, and make a difference for small business owners across America. Ready to shape what’s next?

This is a hybrid role. At Bluevine, we pride ourselves on our collaborative culture, which we believe is best maintained through in-person interactions and a vibrant office environment. All of our offices have reopened in accordance with local guidelines, and are following a hybrid model. In-office days will be determined by location and discipline.

Bluevine is looking for a Senior Cloud Information Security Engineer to join our Security team and take a key role in securing our cloud infrastructure and production environments.

What You'll Do:

• Own and drive the design, implementation, and long-term ownership of cloud security controls and architectures (AWS preferred), applying security-by-design principles
• Continuously assess and improve cloud security posture through vulnerability management and risk assessments
• Design and manage IAM roles, policies, and access models across cloud environments
• Design, implement, and manage firewall and WAF policies for cloud applications and network perimeters
• Own cloud-related security incident investigations and response efforts
• Partner closely with DevOps and R&D to embed security into architecture and deployment processes
• Define and evolve cloud security standards, policies, and best practices
• Drive complex security initiatives end-to-end, from design through long-term ownership
  
  

• 5 + years of experience in Information Security, with a strong focus on cloud and infrastructure security, including hands-on experience with a major Cloud IaaS provider (AWS Mandatory)
• Deep hands-on experience with Linux systems
• Strong networking expertise, including troubleshooting across all OSI layers
• Deep understanding of modern cloud-based applications and APIs (HTTP/S, PKI, microservices, load balancers, firewalls, WAF), with hands-on experience operating security platforms such as WAFs, LBs, VPNs, vulnerability scanners, and directory services
• Strong passion for security automation, with scripting experience (Bash and/or Python)
• Solid understanding of risk assessment and the ability to clearly communicate security and privacy considerations to technical and non-technical stakeholders
• Independent, proactive, and self-driven, with a strong ownership mindset
  
  

• Excellent group health coverage and life insurance
• Stock options
• Hybrid work model
• Meal allowance
• Transportation assistance (terms and conditions apply)
• Generous paid time off plan, Holidays
• Company-sponsored mental health benefits
• Financial advisory services for both short- and long-term goals
• Learning and development opportunities to support career growth
• Community-based volunteering opportunities