Cloud Security Engineer at Polly

At Polly, we are on a mission to modernize the mortgage industry by building a data-driven capital markets ecosystem. Since our founding in 2019, we have been working to replace inefficient, manual processes with a digital pipeline that powers real-time loan trading. Our team is currently tackling a massive, trillion-dollar market, and we are looking for a Senior Cloud Security Engineer to help us protect the infrastructure that serves as the engine of the U.S. economy. If you are someone who values independent thinking and thrives in a collaborative environment, you will find a home here among experts who are passionate about transforming how an entire industry operates.

The opportunity

As a Senior Cloud Security Engineer, you will play a critical role in safeguarding our cloud architecture. You will be the primary advocate for security across our entire development lifecycle, ensuring that our systems remain resilient as we scale. This is a full-time, hybrid position based in the United States, where you will work closely with our DevOps and engineering teams to embed security into every layer of our platform. You will have a direct impact on the design and implementation of our security posture, working alongside leadership to protect the sensitive data of our industry-leading clients.

A day in the life

• You will design and implement robust security controls across our AWS environment, including managing IAM policies to enforce the principle of least privilege.
• You will proactively monitor our infrastructure by configuring and managing tools like AWS Security Hub, GuardDuty, and CloudTrail to detect and respond to potential threats.
• You will collaborate with our engineering teams to integrate automated security checks into our CI/CD pipelines, utilizing tools like Terraform to ensure our deployments remain secure by design.

Who you are

You are a seasoned security professional with at least 3 years of experience in cloud security, including a minimum of 2 years dedicated to AWS environments. You possess a deep technical understanding of cloud networking, data encryption, and vulnerability management. You are comfortable using Python or Bash for automation, and you have practical experience with Terraform or similar infrastructure-as-code tools. You communicate clearly with both technical and non-technical stakeholders, and you are always looking for ways to improve our security posture through threat modeling and proactive risk assessment. Fluency in English is required for this role.

Why you'll love it here

We believe in supporting our team members both inside and outside of the office. By joining us, you will enjoy a culture that prioritizes professional growth and offers direct engagement with senior leadership. Our benefits package is designed to provide peace of mind and flexibility, including:

• Unlimited vacation policy to help you recharge.
• Comprehensive medical, vision, and dental insurance.
• Disability and life insurance coverage.
• A hybrid work environment that balances collaboration with flexibility.