Cloud Security Engineer

Alerus is a commercial wealth bank and national retirement provider with one core purpose: helping clients achieve their financial goals. We are driven by a shared commitment to always do the right thing; leading with integrity and providing valued advice and guidance to our clients. We value the expertise and skillsets each team member provides and encourage collaboration, innovation, adaptability, and an entrepreneurial spirit at all levels of our company.

By consistently seeking improvements and growth, we foster long-term relationships with clients and team members. We are proud to be recognized as a Top Workplace by numerous industry and regional outlets.

Passion for Excellence ::
Success is Never Final ::
Do the Right Thing ::
One Alerus

The Cloud Security Engineer protects the organization’s systems, applications, and data by leading cloud and application security initiatives. This role designs, implements, and continuously improves security controls across cloud platforms and internally developed applications, partnering with technology and business teams to embed security throughout the technology lifecycle. Provides expertise in cloud security architecture, identity management, Dev Sec Ops , vulnerability management, threat detection, incident response, and security automation.

• Design, implement, and maintain security controls across cloud platforms, SaaS environments, and enterprise applications.
• Develop and maintain security standards, architectures, policies, and operational procedures.
• Manage cloud security technologies, identity and access management, Zero Trust initiatives, and security posture management.
• Perform security assessments, threat modeling, architecture reviews, vulnerability management, penetration testing, and control validation.
• Establish and support Secure Software Development Lifecycle (SSDLC) and Dev Sec Ops  practices, including secure coding standards, code reviews, CI/CD security integration, and developer guidance.
• Monitor, detect, investigate, and respond to security threats, incidents, and indicators of compromise across cloud and application environments.
• Automate security processes and enhance monitoring, logging, and reporting capabilities using scripting, APIs, AI, and infrastructure-as-code tools.
• Support disaster recovery, business continuity, regulatory compliance, audits, and third-party/vendor security reviews.
• Provide security leadership, subject matter expertise, risk guidance, and reporting for enterprise technology initiatives and business projects.
• Maintain security documentation and coordinate remediation efforts to address identified risks and vulnerabilities.

• Bachelor’s degree in Information Security, Computer Science, Engineering, or related field (or equivalent experience).
• 5-7 years of information security experience, including 3-5 years in cloud security engineering.
• Relevant certifications such as CISSP, CCSP, Microsoft Security certifications, GIAC, CSSLP, or AWS Security Specialty.
• Experience securing Azure, Microsoft 365, Salesforce, and other cloud environments.
• Experience with Dev Sec Ops , secure application development, vulnerability management, IAM, incident response, and threat detection.
• Strong knowledge of cloud security, identity governance, security automation, application security, CI/CD pipelines, threat modeling, and regulatory compliance frameworks.
• Strong analytical, communication, project management, and problem-solving skills.
• Ability to translate technical concepts for business audiences and balance security requirements with business objectives.
• Self-motivated, collaborative, customer-focused professional with a passion for technology and…