Security Engineering Lead - Cloud and Resilience

📋 Description

• • Lead the design, implementation, and continuous improvement of cloud security architecture across Kraken’s global energy platform, ensuring alignment with industry best practices and regulatory standards.
• • Own and drive the disaster recovery and business continuity strategy for critical infrastructure, defining RTOs and RPOs, and validating recovery procedures through regular testing and simulation exercises.
• • Collaborate directly with Platform and Infrastructure Resilience teams to embed security-by-design principles into cloud-native systems, including Kubernetes, microservices, and serverless architectures.
• • Architect and enforce secure cloud configurations across AWS and other cloud providers, implementing automated compliance checks, identity and access management (IAM) policies, and network segmentation strategies.
• • Lead incident response for security events impacting cloud infrastructure, coordinating cross-functional teams to contain, investigate, and remediate threats with minimal service disruption.
• • Develop and maintain security controls for data protection, encryption at rest and in transit, and secure API gateways supporting customer-facing energy management systems.
• • Evaluate and integrate emerging security technologies and automation tools to enhance threat detection, reduce manual toil, and improve system resilience against advanced persistent threats.
• • Mentor and grow a team of security engineers, providing technical guidance, career development, and performance feedback while fostering a culture of ownership and continuous learning.
• • Partner with product and engineering leadership to assess security risks in new feature development and ensure security requirements are integrated into the product lifecycle from inception.
• • Maintain up-to-date documentation of security architectures, incident response playbooks, disaster recovery runbooks, and compliance audit trails for internal and external reviews.
• • Represent Kraken’s security posture in customer-facing audits, third-party vendor assessments, and industry forums focused on energy sector cybersecurity and resilience.
• • Monitor global threat landscapes relevant to energy infrastructure and proactively adapt security controls to address evolving risks such as ransomware, supply chain attacks, and grid-targeted cyber operations.
• • Work closely with DevOps and SRE teams to embed security into CI/CD pipelines, ensuring automated scanning, secrets management, and infrastructure-as-code validation are enforced at every deployment stage.
• • Drive the adoption of zero-trust principles across cloud environments, eliminating implicit trust and enforcing strict authentication, authorization, and micro-segmentation controls.
• • Ensure all security initiatives directly support Kraken’s mission to build a sustainable, intelligent energy system by safeguarding the integrity and availability of critical energy data and customer systems.