Senior Cloud Security Engineer, AVP - BXTI Cybersecurity

Blackstone is the world’s largest alternative asset manager. We seek to create positive economic impact and long-term value for our investors, the companies we invest in, and the communities in which we work. We do this by using extraordinary people and flexible capital to help companies solve problems. Our $1.1 trillion in assets under management include investment vehicles focused on private equity, real estate, public debt and equity, infrastructure, life sciences, growth equity, opportunistic, non-investment grade credit, real assets and secondary funds, all on a global basis.

Further information is available at . Follow @blackstone on , , and .Blackstone Technology and Innovations (BXTI) is the technology team at the core of each of Blackstone’s businesses and new growth initiatives. Serving both internal and external clients, we work to build the next generation of systems that manage risk, create efficiency, and improve transparency within the firm and across our broad community of investors and portfolio companies.

BXTI is nimble and entrepreneurial – our open, iterative design processes and rapid pace of development mean that everyone on the team has the opportunity to make an impact from day one. We are problem solvers who can take projects from idea to implementation. We believe in active mentoring and developing excellence. We collaborate to find the best answers for our customers and for Blackstone.

We are critical to the firm maintaining its competitive edge.
** Team and Role:
** Blackstone’s Application & Cloud Security (App Sec) Team is responsible for empowering 500+ developers to set and meet security goals by identifying and managing software risks while balancing security with system agility. You will join an ambitious and talented team of software and security engineers that are responsible for evolving how Blackstone “does security” as it continues to move to modern cloud native architectures.

All BXTI teams are reliant on the Cloud Security team’s responses to requests for new AWS services, accounts, and many other key AWS infrastructure pieces. Cloud Security is responsible for owning Cloud Security Posture Management, Cloud Workload Protection, and Cloud Threat Monitoring Infrastructure. It is a cross cutting team that works regularly with all other cybersecurity teams, Cloud Platform Engineering, and Development to ensure we are delivering controls to protect and enable the firm.

The Senior Cloud Security Engineer role is one that will not only help serve both the Cloud Security needs of today but those of the future. It will require extensive knowledge and industry experience to help shape a secure architecture that will allow BXTI to continue to meet business needs as well as grow into a multi-cloud architecture. A successful candidate for this role will not only know AWS but other cloud services, containerization, CI/CD, SDLC, networking, and how software/API are built.
** Responsibilities:
*** Build and own a multidiscipline cloud security program and strategy that encompasses data security in the cloud as a primary focus.
* Design, build, and manage robust and resilient cloud security controls to AWS, Azure, and GCP.
* Influence and drive standardization of secure by default services and frameworks that help scale security.
* Work on cloud security risk mitigation campaigns to eliminate or reduce the most impactful threats to BXTI’s cloud environment.
* Mentor and train junior-level engineers on the team to help them not only enhance their skillsets but better protect the firm long term.
* Be at the forefront of cloud security in the community by working with product teams from established and emerging organizations that can better serve the needs of the team’s strategy and benefit anyone who uses the products.
* Build and own a distributed systems architecture used to scan cloud configuration, container artifacts, and any infrastructure as code (IaC).
* Understand and work towards a balanced approach for enabling developers to reliably identify and fix cloud security flaws while they actively develop.
* Communicate security vulnerabilities, best practices, and mitigation…