Senior Cloud Security & DevSecOps Engineer

Cantor Fitzgerald is a leading global financial services firm specializing in investment banking, capital markets, institutional equity and fixed income sales and trading, commercial real estate, and prime brokerage. The role is part of a rapidly growing technology hub in Warsaw supporting the company’s global technology expansion and driving innovation across its international operations. The Information Security team safeguards the Firm’s global cloud estate by securing operations across AWS, Azure, and GCP, collaborating with platform engineering, application development, and third-party vendors.

• Ownership mindset to take responsibility for assigned projects, tasks, and incidents through to resolution.
• Adaptability and curiosity to learn and master new technologies quickly.
• Technical expertise in Cloud Security, AWS, Azure, GCP, CSPM/CNAPP platforms, and policy-as-code.
• Knowledge of ITIL processes.

Nice to have:

• Experience with Prisma Cloud.

• Lead triage and resolution of complex cloud security issues across AWS, Azure, and GCP with minimal oversight.
• Implement and optimize solutions leveraging CSPM/CNAPP platforms, native cloud controls, and policy-as-code.
• Analyze posture findings, configuration drift, and key risk metrics to ensure security, compliance, and reliability across the cloud estate.
• Drive automation and shift-left initiatives to embed security earlier in the SDLC and enhance operational efficiency.
• Collaborate with platform engineering, application development, vendors, and customers to deliver secure, scalable solutions.
• Champion ITIL processes for change, incident, and problem management.
• Manage and maintain CSPM/CNAPP platforms (Prisma Cloud, Defender for Cloud), cloud-native security services, and policy-as-code pipelines.
• Perform implementations, configuration changes, and platform upgrades across AWS, Azure, and GCP with precision and accountability.
• Work with vendors and cloud service providers to resolve complex technical issues and maintain product lifecycle management.
• Mentor Junior Team Members and provide technical guidance.
• Stay ahead of emerging cloud and DevSecOps technologies and adapt to evolving threat landscapes.