Job Application for Senior Cloud Security Engineer at Acadian Asset Management LLC

Acadian Asset Management LLC is a Boston-headquartered investment management firm with wholly owned affiliates located in Singapore, London, and Sydney. As of March 31, 2025, the firm managed approximately US$122 billion on behalf of major pension funds, endowments, foundations, governments and other investors based in the U.S. and abroad.

Position Overview:

The Senior Security Engineer, reporting to the Director of Information Assurance, is responsible for cloud platform and DevOps security. This senior role will call upon the candidate’s DevSecOps experience to help Acadian Shift Left, injecting security directly into our Software Development Lifecycle and consistently governing our AWS Platform-as-a-Service (PaaS) infrastructure. We are looking for candidates with deep experience and understanding of continuous delivery, container security, SAST/DAST, secrets management, Identity and Access Management (IAM) governance, privilege management, encryption and key management, threat detection, logging, cloud infrastructure security and policy-as-code.

What You’ll Do:

· Assess Acadian’s cloud IAAS environments for Indicators of Misconfiguration (IOMs) utilizing AWS built-in and third-party assessment tools. Utilizing tools like AWS Config, Security Hub, Inspector, Guardduty, and Crowdstrike Falcon, assess monitor and prioritize remediation of Cloud security vulnerabilities.

· Utilizing Policy-as-Code toolkits such as Checkov, develop controls and warnings that inform software delivery teams and integrate security controls into DevOps pipelines. Drive down cloud vulnerability state by working with impacted teams to resolve security issues.

· Develop and maintain tools to detect and remove secrets from code check-ins.

· Establish development best practices for working with code libraries such as docker, pypi and others, ensuring that libraries are only obtained from trusted sources, e.g. Jfrog Artifactory.

· Assist the Information Assurance team with data leak prevention techniques aimed at preventing the exfiltration of code from the Acadian network.

· Work with the Identity and Config team to ensure least privilege in Acadian’s federated identity systems, utilizing tools such as Saviynt, Okta and Microsoft Entra ID. Assist with federation of key enterprise applications as necessary.

· Build Security infrastructure in AWS using Terraform and Cloudformation, leveraging best practices such as multi-region and multi-Availability zone architecture with autoscaling.

· Assist with code governing configuration of an AWS-based global network, including third-party security tools such as Zscaler and Palo Alto Networks.

· Help the Information Assurance team support IT service delivery to Acadian business units 24x7 as part of an on-call rotation, including interaction with MSSP incident responders.

· Work with other IT delivery teams, including the Infrastructure Engineering team, to coordinate cross-team initiatives to achieve firm-wide goals and objectives to drive security projects.

· Document incident findings to help build our knowledgebase; Maintain a strong security posture over enterprise-wide platforms and systems; administer multi-layered technologies to monitor and protect data and equipment from attacks.

We’re Looking for Teammates With:

· Bachelor’s degree in computer science or a related field is required. CISSP, CISA, SANS GIAC, or relevant security certification(s) desired. Additional certifications such as CCNA/CCNP, AWS Security etc. desired.

· 10+ years of IT experience, ideally with some project management.

· Familiarity with AWS, infrastructure-as-code, firewalls, vulnerability assessment tools, DLP, TCP/IP, web content filtering, VPN, endpoint protection, password management/Vaults, log management and correlation, and device/application hardening.

· Understanding of API programming.

· Knowledge of scripting languages like Python.

· Knowledge of infrastructure automation technologies such as Cloudformation and Terraform.

· Strong interpersonal and communication skills.

· Demonstrated analytical and problem-solving skills.

· Ability to work with technical resources, communicate business requirements, set priorities, and manage expectations.

· Ability to multi-task and work on multiple projects.

· Experience with project management life cycle and application architecture.

· Experience in cryptographic technologies and their applications in secure e-mail, content security (for file and database protection), SSL/TLS, code signing, digital signature and digital rights management.

· Proficiency with MS-Windows, Linux, Networking, VMWare, AWS, Azure and M365 suite.

· Strong interpersonal skills to interface with management and staff at all levels within the organization as well as with business partners and vendors.

· Ability to work in a fast-paced and deadline-oriented environment. Self-motivated with critical attention to detail, deadlines and reporting.

Why Work Here:

Acadian is a quantitative investment firm where ideas are empowered by technology. Our team is made up of a diverse mix of professionals who thrive in a culture that fosters ingenuity through collaboration and transparency. We offer a casual office environment, top-notch benefits, and excellent professional and personal development opportunities.

To apply for this position or view Acadian’s open roles, please visit the Careers section of our website at: http://www.acadian-asset.com/careers/Job-opportunities. We will contact only selected candidates. If you are a candidate with a disability, or are assisting a candidate with a disability, and require an accommodation to apply for one of our jobs, please email us at recruiting@acadian-asset.com.

Acadian Asset Management LLC is committed to providing equal employment opportunity to all employees and applicants. No employee or applicant shall be discriminated against on the basis of gender, race, creed, color, sex, age, national origin, marital status, pregnancy or parenthood, veteran status, citizenship status, disability, gender identity, or sexual orientation.

Create a Job Alert

Interested in building your career at Acadian Asset Management LLC? Get future opportunities sent straight to your email.

First Name

Last Name

Preferred First Name

Phone

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

When you apply to a job on this site, the personal data contained in your application will be collected by Acadian Asset Management (“Controller”), which is located at 260 Franklin Street, Boston, MA, and can be contacted by emailing recruiting@acadian-asset.com. Your personal data will be processed for the purposes of managing Controller’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible under Art. 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation) (as implemented by the Data Protection Act 2018, as amended in the UK) as necessary for the purposes of the legitimate interests pursued by the Controller, which are the solicitation, evaluation, and selection of applicants for employment. Your personal data will be shared with Greenhouse Software, Inc., a cloud services provider located in the United States of America and engaged by Controller to help manage its recruitment and hiring process on Controller’s behalf. Accordingly, if you are located outside of the United States, your personal data will be transferred to the United States once you submit it through this site. We take appropriate security measures with the aim of ensuring that privacy rights continue to be protected as outlined in this Notice each time Personal Data is transferred. These steps include imposing contractual obligations on the recipients of Personal Data or ensuring that the recipients are subscribed to ‘international frameworks’ that aim to ensure adequate protection. We have put in place reasonable and appropriate controls to ensure that Personal Data we receive remains secure against accidental or unlawful destruction, loss, alteration, or unauthorised access. Unfortunately, the transmission of Personal Data via the internet is not completely secure. Although we will do our best to protect it, we cannot guarantee its security. Should any sensitive Personal Data be obtained, such as that related to ethnic background, personal circumstance, political opinion, religion, trade union membership, or criminal record, we will apply additional security controls to protect that data. This Notice only applies to Controller. We assume no responsibility for the data protection policies and practices of other companies or third parties including those to whom we may link on our website or to whom may link to us. We recommend that you check the data protection policy of each of these parties. Your personal data will be retained by Controller as long as Controller determines it is necessary to evaluate your application for employment. Under the GDPR, you have the right to request access to your personal data, to request that your personal data be rectified or erased, and to request that processing of your personal data be restricted. You also have to right to data portability. In addition, you may lodge a complaint with an EU or UK supervisory authority.

Select...

Do you have any of the following certifications? *

CFA

CAIA

CPA

None of the above

How did you hear about Acadian?

Select...

How many years of relevant industry experience do you have post education?

Select...

Are you authorized to work lawfully in the US?

Select...

Will you now or in the future require sponsorship for employment visa status (e.g. H-1B visa status)?

Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Acadian Asset Management LLC’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Gender

Select...

Are you Hispanic/Latino?

Select...

Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Veteran Status

Select...

Voluntary Self-Identification of Disability

Form CC-305

Page 1 of 1

OMB Control Number 1250-0005

Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

Alcohol or other substance use disorder (not currently using drugs illegally)
Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
Blind or low vision
Cancer (past or present)
Cardiovascular or heart disease
Celiac disease
Cerebral palsy
Deaf or serious difficulty hearing
Diabetes
Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
Epilepsy or other seizure disorder
Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
Intellectual or developmental disability
Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
Missing limbs or partially missing limbs
Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
Partial or complete paralysis (any cause)
Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
Short stature (dwarfism)
Traumatic brain injury

Disability Status

Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Senior Cloud Security Engineer

Apply for this job

Voluntary Self-Identification

Voluntary Self-Identification of Disability