Xapo Bank is hiring a Principal Cloud Security Engineer (Remote - Work from Anywhere)

Xapo Bank is hiring a Principal Cloud Security Engineer to secure the cloud-native infrastructure powering our global digital banking and crypto platform. In this remote role, you will design, implement, and maintain security controls across AWS and GCP, ensuring our cloud operations are resilient, compliant, and built with security first.

What You'll Do

• Architect, implement, and maintain cloud security controls across AWS and GCP to protect infrastructure, applications, and data.
• Take full ownership of security projects, driving them from initial concept through development, testing, and deployment.
• Review, write and deploy infrastructure-as-code (IaC) security solutions using Terraform.
• Continuously assess cloud environments using Cloud Security Posture Management (CSPM) platforms like Wiz.
• Support monitoring, detection, and response for cloud threats by integrating with tools such as AWS GuardDuty, Security Hub, and GCP Security Command Center.
• Participate actively in incident response and forensic analysis for cloud-related security events.
• Collaborate with cross-functional teams to perform threat modeling and secure architecture reviews for new services and infrastructure changes.
• Help reinforce a security-first culture by sharing best practices and participating in awareness initiatives.

What We're Looking For

• 5+ years of experience in cloud security engineering, DevSecOps, or related infrastructure security roles.
• Demonstrable expertise in securing cloud environments (especially AWS and/or GCP).
• Strong hands-on experience with securing AWS and/or GCP environments (IAM, VPCs, workload protection, encryption, etc.).
• Proficiency in Terraform, with a focus on building and enforcing secure cloud infrastructure.
• Solid experience with cloud-native security tools and CSPM solutions like Wiz, Prisma Cloud, or Orca Security.
• Familiarity with security frameworks and standards (e.g., NIST, CIS, ISO) and their practical application in cloud environments.
• Familiarity with container security concepts.
• Solid grasp of DevSecOps principles, with proven experience integrating security into CI/CD pipelines and operational processes.
• Excellent problem-solving abilities, with a proactive mindset and the capability to adapt to new challenges in dynamic environments.
• A dedicated workspace.
• A reliable internet connection with the fastest speed possible in your area.
• Alignment with Our Values and the Xapo Values-Driven Leadership principles.

Nice to Have

• Relevant certifications are a plus, such as: AWS Certified Solutions Architect, AWS Certified Security – Specialty, Google Professional Cloud Security Engineer, or other recognized cloud security certifications.

Technical Stack

• AWS
• GCP
• Terraform
• Wiz
• Prisma Cloud
• Orca Security
• AWS GuardDuty
• AWS Security Hub
• GCP Security Command Center

Team & Environment

You will join a fully distributed team of over 130 Xapiens as part of the security team, collaborating closely with engineering, Platform, and product teams.

Benefits & Compensation

• Work 100% remotely from anywhere in the world.
• Great work-life balance with autonomy and collaborative teamwork.
• Set your own work schedule.
• Flexible PTO plan.
• Yearly budget for individual learning and development goals.

Work Mode

This is a global, fully remote position open to candidates in 30+ countries.

Diversity is at the heart of who we are. We work hard, think globally, and inspire each other to learn and grow while committing to change the way things are done. We prioritize consumer protection, adhere to regulatory requirements, and are accountable for upholding principles of fair treatment, transparency, and ethical conduct.