Cloud Security Engineer (GCP/AWS)

MoonPay is a unified payments platform for digital currency, dedicated to onboarding the world to the decentralized economy. We make it easy for anyone, anywhere, to buy, sell, swap, and pay in digital currencies. Trusted by over 30 million customers and 500+ ecosystem partners, MoonPay's secure, enterprise-grade platform drives mainstream crypto adoption worldwide. We are fully licensed in the U.S. and regulated across the UK, EU, Canada, and Australia, committed to building a fairer, more open financial system. We value diversity and inclusion, striving to create an environment where every voice matters. We are building systems that benefit all, and we openly invite contributions from people of all backgrounds to join us in shaping the future of payments and the decentralized economy.

Introduction

MoonPay is seeking a highly skilled and proactive Cloud Security Engineer to join our Security Team. In this role, you will be instrumental in fortifying our cloud infrastructure across GCP and AWS, ensuring robust security through rigorous threat modeling, automated controls, and continuous posture management. This is an exciting opportunity to contribute to a rapidly growing company at the forefront of the decentralized economy.

Responsibilities

• Perform Threat Modeling for architectural infrastructure changes and new cloud infrastructure and Kubernetes deployments in GCP and AWS.
• Design, implement, and manage robust security controls and configurations for GCP and AWS environments.
• Develop and maintain secure Infrastructure as Code (IaC) using Terraform and related tools.
• Implement, manage, and enhance Cloud Security monitoring using DataDog, including alert configuration and response procedures.
• Implement and manage Just-in-Time (JIT) access solutions for elevated privilege access to cloud resources.
• Establish and manage the cloud incident management process and program, including leading incident response activities for cloud security events.
• Collaborate with infrastructure and development teams to integrate cloud security best practices throughout the infrastructure lifecycle.
• Research and evaluate emerging cloud security threats and vulnerabilities, and develop effective mitigation strategies.
• Develop and deliver cloud security training and awareness programs to engineering and relevant teams.
• Contribute to the development and maintenance of cloud security standards, policies, and documentation.
• Manage the future of our cloud security posture, driving continuous improvement and strategic initiatives.
• Accurately document cloud security configurations, processes, and knowledge.
• Conduct vulnerability assessments and drive remediation for cloud infrastructure.
• Support requirements and evidence requested from auditors, compliance, and regulators.

Requirements

• Extensive experience in Cloud Security, with deep expertise in GCP and AWS.
• Strong understanding of Threat Modeling principles and their application to cloud infrastructure and architectural designs.
• Hands-on experience with cloud security tools and technologies, including DataDog for security monitoring and Terraform for Infrastructure as Code.
• Proven experience in designing, implementing, and managing cloud security controls and configurations.
• Experience with Identity and Access Management (IAM) in cloud environments, including the implementation and management of Just-in-Time (JIT) access solutions.
• Proven ability to establish and manage incident response programs specifically for cloud environments.
• Comfortable explaining technical security concepts, vulnerabilities, and effective mitigations to diverse audiences.
• Self-motivated, able to work independently and effectively in a remote setting while maintaining a team-focused mindset.
• Highly skilled in documenting security processes and configurations and effectively sharing knowledge with other teams.

Nice to Have

• Proficiency in scripting or programming languages relevant to cloud automation and security (e.g., JavaScript, Python, Go, or similar).
• Good understanding of cryptography and its applications in cloud security.
• Contribution to the security community (e.g., open source projects, conference talks, CTFs).
• Relevant security certifications (e.g., GCP Professional Cloud Security Engineer, AWS Certified Security - Specialty, SANS).
• Experience working in a disruptive technology environment, ideally within FinTech, SaaS, or Crypto.

Benefits

• Competitive salary ($209.66 - $220.70 a year)
• Equity package for all employees
• Pay for performance equity bonus
• Moonshot award for exceptional impact ($250,000 equity grant twice a year for 10 employees)
• Unlimited holidays
• Hybrid working schedule (remote or nearest Moonbase)
• Private Healthcare benefits
• Enhanced parental leave
• Annual training budget
• Home office setup allowance
• Remote working allowance
• Monthly budget for MoonPay products and zero fee crypto transactions
• Employee referral program (10K in USDC)
• Regular remote company offsites
• Opportunity to work in a disruptive and fast-growing company

About Company

MoonPay is a unified payments platform for digital currency, dedicated to onboarding the world to the decentralized economy. We make it easy for anyone, anywhere, to buy, sell, swap, and pay in digital currencies. Trusted by over 30 million customers and 500+ ecosystem partners, MoonPay's secure, enterprise-grade platform drives mainstream crypto adoption worldwide. We are fully licensed in the U.S. and regulated across the UK, EU, Canada, and Australia, committed to building a fairer, more open financial system. We value diversity and inclusion, striving to create an environment where every voice matters.

How to Apply

Candidates can apply directly through the provided application link. MoonPay is an equal opportunity employer and committed to providing reasonable accommodations for qualified individuals with disabilities.