Cloud Security Engineer
Trinity Capital · Phoenix, Arizona, United States
FULL TIMEpermanent
Job Description
The Cloud Security Engineer secures Trinity Capital’s cloud and hybrid infrastructure across Azure, AWS, and multi-cloud environments, protecting corporate data, financial systems, and regulated workloads.
Are you the right applicant for this opportunity Find out by reading through the role overview below.
The role also shapes company-wide security strategy, including governance of AI and LLM tools, ensuring AI use meets Trinity’s data protection standards and SEC obligations as a public BDC.
This full-time, exempt position reports to the Information Technology Manager and is based on-site at Trinity’s headquarters in downtown Phoenix, AZ.
Duties and ResponsibilitiesCloud Infrastructure SecurityDesign and manage cloud security controls across Azure, AWS, and multi-cloud using a zero-trust modelAdminister identity and access across Azure and AWS, enforcing least-privilege and just-in-time accessBuild infrastructure-as-code security controls and enforce policy-as-code (Terraform, AWS Config, Azure Policy, OPA)Operate cloud-native security tooling (Sentinel, Microsoft Defender, CSPM/CWPP) and harden container and Kubernetes workloadsManage data loss prevention across Microsoft 365 and SaaS, and keep backups and disaster recovery tested
Company-Wide Security ProgramDrive Trinity’s enterprise security strategy, roadmaps, and policies with IT leadershipRun risk assessments, vulnerability scans, and penetration tests; lead remediation and incident responseReview cloud architecture designs and own endpoint and email security (MAM/MDM, anti-phishing, DKIM/DMARC/SPF)Maintain security documentation and serve as internal security subject matter expert
AI Platform Security & GovernanceOwn the security framework for Trinity’s AI and LLM deploymentsSet data classification and handling rules for AI tools, and build an AI governance program with Compliance (acceptable use, training)Vet third-party AI tools for data residency, retention, and API security, and sign off on new AI use cases
Compliance & Regulatory RequirementsSupport SOX ITGC compliance with evidence over access, change management, and system availabilityUphold SEC obligations as a public BDC - data protection, records retention, and incident disclosureMaintain controls and audit evidence aligned with NIST CSF and ISO 27001
CharacteristicsAnalytical mindset with a risk-based approach to security decision-makingClear and concise written and verbal communication – able to explain complex security concepts to non-technical stakeholdersStrong problem-solving skills with the ability to balance security rigor against business agilityCollaborative across functional groups, including Finance, Legal, Compliance, and OperationsHighly adaptable; comfortable operating in a fast-paced, growth-oriented financial services environmentPositive attitude, strong work ethic, and a sense of ownership over outcomesExcellent time management with the ability to manage competing priorities and maintain broad situational awareness
Desired RequirementsBachelor’s degree in Computer Science, Information Security, or a related field7+ years of experience in information security, with at least 3 years focused on cloud security in Azure and/or AWS environmentsHands-on expertise with Microsoft Azure security services (Entra ID, Defender for Cloud, Sentinel, Purview, Intune, Conditional Access) and securing Microsoft 365Solid AWS security fundamentals (IAM, Security Hub, GuardDuty, CloudTrail, SCPs), network security (firewalls, VPNs, NSGs, DNS, ZTNA), and infrastructure-as-code security (Terraform, policy-as-code)Experience supporting SOX ITGC audits and/or operating within SEC-regulated environments; familiarity with NIST CSF and ISO 27001Proven vulnerability assessment, penetration testing, and remediation, plus experience governing third-party SaaS and AI platformsExcellent communication skills, with a track record of translating security risk into business terms for leadership
Physical RequirementsAbility to sit, stand, talk, utilize a computer, and read computer screens for extended periods of timeReliable transportation with the ability to travel locally and nationally as neededMaintain consistent, repetitive motion for data entry (typing/clicking)Ability to lift up to 20 lbs.
OtherMinimal travel required (approximately 10%)
Trinity Capital Inc. (NYSE: TRIN) is an international alternative asset manager that seeks to deliver consistent returns for investors through access to private credit markets. Trinity Capital sources and structures investments in well-capitalized growth-oriented companies. With five distinct business verticals — Tech Lending, Equipment Finance, Healthcare & Life Sciences, Sponsor Finance, and Asset Based Lending — Trinity Capital stands as a long-term trusted partner for innovative companies seeking tailored debt solutions. Headquartered in Phoenix, Arizona, Trinity Capital's dedicated team is strategically located across the United States and in Europe. xzbcwsv
Trinity is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender expression, gender identity, or any other characteristic protected by law.
Are you the right applicant for this opportunity Find out by reading through the role overview below.
The role also shapes company-wide security strategy, including governance of AI and LLM tools, ensuring AI use meets Trinity’s data protection standards and SEC obligations as a public BDC.
This full-time, exempt position reports to the Information Technology Manager and is based on-site at Trinity’s headquarters in downtown Phoenix, AZ.
Duties and ResponsibilitiesCloud Infrastructure SecurityDesign and manage cloud security controls across Azure, AWS, and multi-cloud using a zero-trust modelAdminister identity and access across Azure and AWS, enforcing least-privilege and just-in-time accessBuild infrastructure-as-code security controls and enforce policy-as-code (Terraform, AWS Config, Azure Policy, OPA)Operate cloud-native security tooling (Sentinel, Microsoft Defender, CSPM/CWPP) and harden container and Kubernetes workloadsManage data loss prevention across Microsoft 365 and SaaS, and keep backups and disaster recovery tested
Company-Wide Security ProgramDrive Trinity’s enterprise security strategy, roadmaps, and policies with IT leadershipRun risk assessments, vulnerability scans, and penetration tests; lead remediation and incident responseReview cloud architecture designs and own endpoint and email security (MAM/MDM, anti-phishing, DKIM/DMARC/SPF)Maintain security documentation and serve as internal security subject matter expert
AI Platform Security & GovernanceOwn the security framework for Trinity’s AI and LLM deploymentsSet data classification and handling rules for AI tools, and build an AI governance program with Compliance (acceptable use, training)Vet third-party AI tools for data residency, retention, and API security, and sign off on new AI use cases
Compliance & Regulatory RequirementsSupport SOX ITGC compliance with evidence over access, change management, and system availabilityUphold SEC obligations as a public BDC - data protection, records retention, and incident disclosureMaintain controls and audit evidence aligned with NIST CSF and ISO 27001
CharacteristicsAnalytical mindset with a risk-based approach to security decision-makingClear and concise written and verbal communication – able to explain complex security concepts to non-technical stakeholdersStrong problem-solving skills with the ability to balance security rigor against business agilityCollaborative across functional groups, including Finance, Legal, Compliance, and OperationsHighly adaptable; comfortable operating in a fast-paced, growth-oriented financial services environmentPositive attitude, strong work ethic, and a sense of ownership over outcomesExcellent time management with the ability to manage competing priorities and maintain broad situational awareness
Desired RequirementsBachelor’s degree in Computer Science, Information Security, or a related field7+ years of experience in information security, with at least 3 years focused on cloud security in Azure and/or AWS environmentsHands-on expertise with Microsoft Azure security services (Entra ID, Defender for Cloud, Sentinel, Purview, Intune, Conditional Access) and securing Microsoft 365Solid AWS security fundamentals (IAM, Security Hub, GuardDuty, CloudTrail, SCPs), network security (firewalls, VPNs, NSGs, DNS, ZTNA), and infrastructure-as-code security (Terraform, policy-as-code)Experience supporting SOX ITGC audits and/or operating within SEC-regulated environments; familiarity with NIST CSF and ISO 27001Proven vulnerability assessment, penetration testing, and remediation, plus experience governing third-party SaaS and AI platformsExcellent communication skills, with a track record of translating security risk into business terms for leadership
Physical RequirementsAbility to sit, stand, talk, utilize a computer, and read computer screens for extended periods of timeReliable transportation with the ability to travel locally and nationally as neededMaintain consistent, repetitive motion for data entry (typing/clicking)Ability to lift up to 20 lbs.
OtherMinimal travel required (approximately 10%)
Trinity Capital Inc. (NYSE: TRIN) is an international alternative asset manager that seeks to deliver consistent returns for investors through access to private credit markets. Trinity Capital sources and structures investments in well-capitalized growth-oriented companies. With five distinct business verticals — Tech Lending, Equipment Finance, Healthcare & Life Sciences, Sponsor Finance, and Asset Based Lending — Trinity Capital stands as a long-term trusted partner for innovative companies seeking tailored debt solutions. Headquartered in Phoenix, Arizona, Trinity Capital's dedicated team is strategically located across the United States and in Europe. xzbcwsv
Trinity is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender expression, gender identity, or any other characteristic protected by law.