Cloud Security Principal Engineer

Ally Financial

Confirmed live yesterday High trust
Hybrid

Quick summary

Work type
Hybrid
Location
—
Salary
$110,000–$180,000 / yr
Posted
24 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $189k
This role $145k
$93k most similar roles pay here $273k

This role pays less than 87% of similar roles. Most pay $161,093–$216,300 — the shaded band above. At the midpoint, this role pays about $145k versus about $189k for comparable roles.

Based on 240 similar postings.

Employer

About Ally Financial

Ally Financial is a US-based digital financial services company offering online banking, auto financing, mortgage, and investment products. It is one of the largest all-digital banks in the United States.

Ally Financial currently has 14 open roles on FindRole.

Listed pay typically runs $110,000–$180,000 across 14 roles with salary data.

Most-posted roles

View all roles at Ally Financial

At a glance

TL;DR · Cloud Security Principal Engineer

The Cloud Security Principal Engineer joins the Information Protection and Risk Management team to identify, manage, and mitigate security risks. This role focuses on designing and implementing technical controls, governance processes, and infrastructure for SaaS platforms while maturing cloud-focused security policies and metrics. Day-to-day responsibilities include managing the enterprise CSPM platform, performing architecture and engineering tasks, conducting user activity audits, and collaborating with technical leaders to refine the organization's security posture for cloud-based technologies and application security capabilities. The ideal candidate possesses expertise in Python, Terraform, and frameworks like TensorFlow or PyTorch. Required skills include experience with Infrastructure as Code, CI/CD tools, and cloud platforms such as AWS, Azure, or GCP. Additionally, the role requires knowledge of OWASP Top 10 LLM and AI Security to secure various cloud-based technologies and platform architectures.

What you'll do

  • Design and implement security governance processes, policies, and controls for SaaS platforms.
  • Manage day-to-day troubleshooting, configuration tuning, and escalation for the enterprise CSPM platform.
  • Identify security risks and lead remediation efforts in coordination with the IPRM team.
  • Perform architecture and engineering tasks to support existing technologies and new security projects.
  • Conduct regular health checks and user activity audits to identify baseline offsets.
  • Implement and operationalize security technologies to improve visibility and reduce organizational risk.
  • Consult with project teams to ensure cloud provider and SaaS architectures include proper security controls.
  • Partner with technical leaders to mature application security capabilities and overall cloud security posture.

What we're looking for

  • 7+ years of relevant experience.
  • Bachelor’s Degree in a relevant field of study or equivalent.
  • Demonstrated technical expertise in two or more technology areas such as compute, storage, network, or data (preferred).
  • Experience as a software developer with knowledge of automation, Infrastructure as Code, and DevOps tools (preferred).
  • Strong programming skills in Python, Terraform, and experience in frameworks like TensorFlow or PyTorch (preferred).
  • 5+ years of experience in information security practices, controls, and governance (CISSP preferred).
  • 5+ years of experience as a technical resource within an IT organization (enterprise/matrixed organization preferred).
  • 4+ years of experience with cloud platforms like AWS, Azure, or GCP (operational experience preferred).

More like this

Similar roles

Cloud Product Security Engineer

Allstate

Remote (IL) 10 days ago $90,700–$195,700
Python Java JavaScript AWS Azure CI/CD Infrastructure as Code CSPM DLP SIEM SDLC Security Engineering Cloud Security Automated Testing Data Loss Prevention Encryption Logging
Remote

Principal Platform Security Engineer

Early Warning Services

Scottsdale, AZ +3 25 days ago $184,000–$230,000
Platform Security Cloud Strategy Automation Risk Management Systemic Risk Reduction Reference Architecture Shared Services Technical Standards Control Strategy
10+ yrs exp Hybrid

Lead Engineer, Cloud Security

Target

Brooklyn Park, MN 15 days ago $132,000–$238,000
CSPM CNAPP Kubernetes Terraform Python Go CI/CD GCP AWS Azure Rego SIEM SOAR Infrastructure as Code RBAC SSO NIST CIS Benchmarks
7+ yrs exp Hybrid

Senior Cloud Security Engineer

Adobe

Lehi, UT +2 7 days ago $168,200–$310,100
AWS Azure GCP Kubernetes Terraform CloudFormation Python Go Rust CI/CD Infrastructure as Code policy-as-code Identity and Access Management Security Automation Serverless Distributed Systems Networking

Senior Lead, Cloud Security Engineering

Northern Trust

Chicago, IL 113 days ago $114,500–$194,700
Terraform Python AWS Azure GCP Infrastructure as Code (IaC) Policy as Code (PaC) CSPM Wiz Microsoft Defender for Cloud CI/CD GitHub Actions Git Okta Ping NIST 800-53 CIS
8+ yrs exp Hybrid

Managing Engineer, Cloud Security Engineering

Allstate

Remote (IL) 10 days ago $120,000–$195,000
AWS Azure GCP Python Bash Terraform Kubernetes Docker CI/CD Test-Driven Development Cloud Automation Infrastructure as Code Security Engineering
5+ yrs exp Remote