Title: Senior Cloud Security Engineer DevSecOpsMulti‑Cloud JobID 17248 Position Level Individual Contributor Team Technology Solutions & Svcs Working Time Full-Time Position Type Regular Travel Requirements 5% Workplace Type Remote Senior Cloud Security Engineer: DevSecOps/Multi‑Cloud General information Press space or enter keys to toggle section visibility JobID 17248 Description & Requirements Press space or enter keys to toggle section visibility At Jack Henry, we’re more than a technology company, we’re a force for good in financial services. We’re redefining how community banks and credit unions connect with the people they serve. Our mission is rooted in people inspired innovation, empowering financial institutions to deliver seamless, secure, and human centered experiences. We deliver cutting-edge solutions that are paving the way for the next generation of digital banking and payments, but our true impact begins with our associates. If you're ready to help transform an industry and grow with a company that values purpose, collaboration, and excellence then we’d love to meet you. Jack Henry & Associates, a leader in the fintech industry; is hiring a Senior Cloud Security Engineer with deep expertise in DevSecOps, multi-cloud security engineering, automation, and security controls development. This role is responsible for embedding security throughout the CI/CD lifecycle—ensuring Security as Code across AWS, Azure, and Google Cloud Platform (GCP). The ideal candidate is highly technical, automation‑driven, and passionate about building scalable, cloud‑native guardrails that secure critical Cloud workloads. This engineer will design, implement, and validate cloud security controls, improve our CSPM capabilities, and automate remediation workflows across multi-cloud environments. This role also provides opportunities to mentor junior engineers and uplift engineering excellence across the team.   This position may be worked remotely within the United States, with the exception of California. This position is not eligible for immigration sponsorship and support. Please do not apply if at any time you need immigration support now or in the future (i.e., H-1B, PERM). All positions, regardless of location, may require an onsite interview or in-person onboarding requirement to verify your identity. What you’ll be responsible for: - Researches, recommends and implements changes to enhance network security as part of our cloud infrastructure transformation. - Design security solutions that maintain security and compliance within public cloud while ensuring alignment of technology to business strategy. - Develop and understand JHA’s public cloud strategic roadmap and continuously identify gaps in cloud security program coverage. - Work with the Digital Cloud DevOps team to integrate and operationalize security within their workflows. - Participate and collaborate in project level architecture reviews and vendor selection recommendations. - Assist in creating security architecture documentation based on specifications. - Review security design to discover any errors or confirm the design meets required specifications. - Build and maintain secure CI/CD workflows using GitHub Repositories, GitHub Actions, GitHub Docs, and GitOps operating patterns. - Champion and implement Security as Code principles from design through deployment. - Engineer and operate Cloud Security Posture Management (CSPM) solutions across AWS, Azure, and GCP. - Build, test, validate, and promote cloud security controls into production workloads. - Perform ongoing cloud control effectiveness evaluations and contribute to ICS security architecture. - Use Terraform to build, deploy, and manage cloud security infrastructure and guardrail configurations. - Develop automation using Python to support monitoring, remediation, CI/CD integrations, and guardrail enforcement. - Performs other duties as assigned. What you’ll need to have: - Minimum of 6 years of experience in software development, DevOps, or Infrastructure as Code - Building and maintaining secure CI/CD workflows using GitHub Repositories, GitHub Actions, GitHub Docs, and/or GitOps operating patterns - Cloud Security Posture Management (CSPM) Engineering - Hands-on experience deploying and managing containerized applications - Practical experience in declarative service infrastructure environments, specifically using Terraform - Experience in an AWS, Azure, and/or GCP cloud environment What would be nice for you to have - Experience managing production environments in Google Cloud Platform (GCP) - Support cloud security architecture decisions, threat modeling engagements, and change control processes. - Implement serverless automated remediation using AWS Lambda, Azure Functions, and GCP Cloud Functions. - Mentor and coach junior and mid-level engineers. - Lead design discussions, perform peer reviews, and provide guidance on best practices. - Maintain engineering documentation, runbooks, diagrams, and GitHub-based developer guidance. - Production Programming Experience in Go or Python - Familiarity with operating in a Unix/Linux shell. - Industry Certification in Google PCSE, AWS Security, AZ-500, CKS, CCSP, CISSP, CCSK If you got this far, we hope you're feeling excited about this opportunity. Even if you don't feel you meet every single requirement on this posting, we still encourage you to apply. We’re looking for passionate, driven individuals who align with our mission and can bring unique perspectives to our team. Why Jack Henry? At Jack Henry, we live by the motto: “Do the right thing, do whatever it takes, and have fun.” It’s more than a tagline, it’s the foundation of our culture. We recognize that our associates are the key to our success, and we’re deeply committed to their wellbeing. That’s why we offer comprehensive benefits designed to support your physical, mental, and financial health so you can thrive both personally and professionally. We’re also leading the way in technology modernization, helping financial institutions evolve with speed, security, and flexibility. Our strategy focuses on delivering secure data access, mitigating fraud, and enabling seamless integration. Empowering our teams to build innovative solutions that meet the evolving needs of accountholders. Culture of Commitment Ask our associates why they love Jack Henry, and many will tell you it is because our culture is exceptional. We do great things together. Our culture empowers us to rise to challenges, seek new opportunities, and support one another through change. It’s this shared commitment that drives our success. We’re proud to foster an environment where inclusion, sustainability, and community impact are more than values, they’re how we operate. Visit our Corporate Sustainability site to learn more about our culture and commitment to our people, customers, community, environment, and shareholders. Equal Employment Opportunity At Jack Henry, we know we are better together. We value, respect, and protect the uniqueness each of us brings. Innovation flourishes by including all voices and makes our business - and our society - stronger. Jack Henry is an equal opportunity employer and we are committed to providing equal opportunity in all of our employment practices, including selection, hiring, performance management, promotion, transfer, compensation, benefits, education, training, social, and recreational activities to all persons regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, genetic information, pregnancy, marital status, sex, gender, gender identity, gender expression, age, sexual orientation, and military and veteran status, or any other protected status protected by local, state or federal law. No one will be subject to, and Jack Henry prohibits, any form of discipline, reprisal, intimidation, or retaliation for good faith reports or complaints of discrimination of any kind, pursuing any discrimination claim, or cooperating in related investigations. Requests for full corporate job descriptions may be requested through the interview process at any time.

Title: Information Security Engineer 4 - Contingent Location: Charlotte, NC, United States (Hybrid) Job Description: Azure EDR gcp IDS/IPS Cissp Information Security AWS GIAC SIEM CISM Title: Information Security Engineer Location: 300 S Brevard St Charlotte, NC Duration: 18 months Work Engagement: W2 Work Schedule: 3 days in office/2 days remote Benefits on offer for this contract position: Health Insurance, Life insurance, 401K and Voluntary Benefits Summary: We are seeking a highly skilled Information Security Engineer to lead and support advanced cybersecurity initiatives. This role is responsible for handling complex security incidents, performing deep technical investigations, and designing robust security solutions across the enterprise. The ideal candidate will bring strong expertise in incident response, risk management, and modern security technologies, along with the ability to collaborate and influence across teams. Responsibilities: - Lead and manage computer security incident response activities for highly complex and high-impact events - Conduct technical investigations and digital forensics to determine root cause and recommend mitigation strategies - Provide security consulting to internal stakeholders, ensuring alignment with corporate security policies, standards, and best practices - Design, document, test, and maintain advanced security solutions, including: - Networking security - Cryptography - Cloud security - Authentication and directory services - Email and internet security - Application and endpoint protection - Analyze and correlate security logs to detect anomalies and support investigations - Apply subject matter expertise to implement and enhance key information security domains, including: - Threat identification and modeling - Risk management - Monitoring and incident response - Access management - Confidentiality, integrity, and availability controls - Business continuity planning - Identify vulnerabilities, conduct risk assessments, and evaluate remediation options - Collaborate with and influence cross-functional teams and leadership - Lead and mentor a team to successfully achieve security objectives Requirements: - Applicants must be authorized to work for ANY employer in the U.S. This position is not eligible for visa sponsorship. - Proven Information Security Engineering experience - Strong experience in incident response, threat analysis, and vulnerability management - Deep understanding of enterprise security architecture and technologies - Proven ability to lead projects and influence stakeholders at all levels - Excellent analytical, problem-solving, and communication skills - Experience with cloud platforms (e.g., AWS, Azure, GCP) - Relevant certifications such as CISSP, CISM, CEH, or GIAC - Experience in security tools such as SIEM, EDR, IDS/IPS, or DLP solutions - Prior leadership or team management experience

• Perform complex administrative/operational tasks from security processes • Carry out measurements and tests for selected subject fields related to security/data protection • Participate in the definition and performance of tests as part of security management and reviews in the task field • Plan and procure technical equipment (e.g., measuring devices, testing tools) • Run selected reference systems for security systems and specific security management tools, including managing applications/providing technical support, in the task field • Provide technical support for security management systems • Commercially evaluating security measures; acting as a point of contact for Group units as part of the implementation process • Support employees regarding security topics • Analyze and preparing data and information on security topics • Being involved in projects

The Atlassian Security Team's purpose is to build trust. We seek to lead our peers in cloud and product security, meet all customer requirements and exceed requirements for industry security standards and certifications. Do you believe an organization should be open and transparent about its programs, processes, and metrics? We do. This is why we share our journey and encourage other cloud providers to do the same. We are looking for a Head of Product Security to partner with the broader Trust Organization and all of Atlassian, to shape our security posture, work across product teams, infrastructure organizations and security functions globally in a highly collaborative and engineering-driven environment to improve the security of both our Data Center and Cloud products, our infrastructure and our entire company. We are seeking an experienced and visionary security engineering leader who wants to join a team of highly talented security leaders and professionals who are revolutionizing the delivery of Atlassian platform to the world's most critical organizations in a secure way. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. This position requires strong cross-organizational leadership, communication skills, deep technical security knowledge and being very hands-on with product designs, threat modeling, security reviews, vulneability management and end-to-end security controls from a product and system infrasturcture perspective. Working at Atlassian Atlassians can choose where they work - whether in an office, from home, or a combination of the two. That way, Atlassians have more control over supporting their family, personal goals, and other priorities. We can hire people in any country where we have a legal entity. You will be expected to lead the organization that is responsible to: - Collaborate with cross functional teams to define various security controls and translate them for engineering implementation for the Atlassian prodiuct teams. - Develop and execute a comprehensive product security strategy that aligns with our core strategic objectives, and exceeds the high expectations set by our customers - Partner with product development teams to embed security best practices and considerations across the entire development lifecycle, ensuring that new features meet the highest trust standards - Collaborate with senior technical leadership across Atlassian infrastructure and IT teams to provide technical leadership to maintain compliance and adhere to different regulatory requirements. - Promote automation and drive our corporate teams to use the latest security tools, techniques and methodologies to build secure products by default. At Atlassian, we strive to design equitable, explainable, and competitive compensation programs. We follow consistent hiring practices and account for each candidate's skills, knowledge, and experience when setting base pay within the range. Please visit go.atlassian.com/payzones for more information on which locations are included in each of our geographic pay zones. However, please confirm the zone for your specific location with your recruiter. This role may also be eligible for benefits, bonuses, commissions, and equity. In The United States, we have three geographic pay zones. For this role, our current base pay ranges for new hires in each zone are: Zone A: $294,300 - $384,225 Zone B: $265,500 - $346,625 Zone C: $244,269 - $318,907 Your background: - At least 10+ years of multifaceted security leadership and management experience in a technology-centric company, including experience leading security teams of 0+ engineers and analysts in a globally distributed organization that services dozens of partners. - Expertise in threat modeling and the associated frameworks (e.g. STRIDE) coupled with the ability to lead and mentor across the organization on the key principles of threat modeling as well as risk assessment. - Understanding of compliance frameworks and their application to standards (e.g. SOC 2, HIPAA). Demonstrated ability to develop a strategic approach to streamline product security processes and capabilities. - Experience designing and deploying security controls across all security domains such as access management, data protection, vulnerability management, incident response and management, application security, network security, preventive, detective and offensive security solutions. - Experience securing cloud based infrastructures; AWS, G-suite, Salesforce, etc - Experience leading highly complex, org wide security change programs - Outstanding interpersonal and communication skills including EQ, mentoring, coaching, collaborating, and team building; ability to influence both internally and externally, and to drive multi-functional alignment and action - Experience in planning and driving direction autonomously - both as a hands-on security engineer, and as a leader - Maintain an area of core strength in one or more security infrastructure disciplines where you can lead through your expertise - Understanding regulatory requirements and controls such as GDPR, SOX , SOC 2, FedRAMP etc. - Track-record in working effectively with scaled systems and different methods for maintaining a security posture - Comfort in the level and speed of learning and ambiguity needed to navigate fast-evolving fields like AI - Excellent oral and written communications skills and experience interacting with both business and Development/Engineering individuals at all levels including the executive level Benefits & Perks Atlassian offers a wide range of perks and benefits designed to support you, your family and to help you engage with your local community. Our offerings include health and wellbeing resources, paid volunteer days, and so much more. To learn more, visit go.atlassian.com/perksandbenefits . About Atlassian At Atlassian, we're motivated by a common goal: to unleash the potential of every team. Our software products help teams all over the planet and our solutions are designed for all types of work. Team collaboration through our tools makes what may be impossible alone, possible together. We believe that the unique contributions of all Atlassians create our success. To ensure that our products and culture continue to incorporate everyone's perspectives and experience, we never discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status. All your information will be kept confidential according to EEO guidelines. To provide you the best experience, we can support with accommodations or adjustments at any stage of the recruitment process. Simply inform our Recruitment team during your conversation with them. To learn more about our culture and hiring process, visit go.atlassian.com/crh . In line with local law, identity verification (which may include use of biometric data) is a condition of employment with Atlassian for employment fraud purposes.