• Supervise SOC operations, ensuring monitoring, investigation, and response to security incidents. • Serve as a technical reference for critical incidents and support the team in threat analysis and mitigation. • Coordinate Identity and Access Management (IAM) activities, including user lifecycle, privileged access, and periodic access reviews. • Ensure the evolution of detection rules, automations, processes, and security controls. • Monitor operational performance indicators and implement continuous improvement actions. • Plan and coordinate team activities, ensuring adherence to processes and service levels. • Work closely with Infrastructure, Cloud, DevOps, Governance, and Compliance teams. • Contribute to the definition of Information Security strategies, architecture, and roadmap.

Title: Senior Cloud Security Engineer DevSecOpsMulti‑Cloud JobID 17248 Position Level Individual Contributor Team Technology Solutions & Svcs Working Time Full-Time Position Type Regular Travel Requirements 5% Workplace Type Remote Senior Cloud Security Engineer: DevSecOps/Multi‑Cloud General information Press space or enter keys to toggle section visibility JobID 17248 Description & Requirements Press space or enter keys to toggle section visibility At Jack Henry, we’re more than a technology company, we’re a force for good in financial services. We’re redefining how community banks and credit unions connect with the people they serve. Our mission is rooted in people inspired innovation, empowering financial institutions to deliver seamless, secure, and human centered experiences. We deliver cutting-edge solutions that are paving the way for the next generation of digital banking and payments, but our true impact begins with our associates. If you're ready to help transform an industry and grow with a company that values purpose, collaboration, and excellence then we’d love to meet you. Jack Henry & Associates, a leader in the fintech industry; is hiring a Senior Cloud Security Engineer with deep expertise in DevSecOps, multi-cloud security engineering, automation, and security controls development. This role is responsible for embedding security throughout the CI/CD lifecycle—ensuring Security as Code across AWS, Azure, and Google Cloud Platform (GCP). The ideal candidate is highly technical, automation‑driven, and passionate about building scalable, cloud‑native guardrails that secure critical Cloud workloads. This engineer will design, implement, and validate cloud security controls, improve our CSPM capabilities, and automate remediation workflows across multi-cloud environments. This role also provides opportunities to mentor junior engineers and uplift engineering excellence across the team.   This position may be worked remotely within the United States, with the exception of California. This position is not eligible for immigration sponsorship and support. Please do not apply if at any time you need immigration support now or in the future (i.e., H-1B, PERM). All positions, regardless of location, may require an onsite interview or in-person onboarding requirement to verify your identity. What you’ll be responsible for: - Researches, recommends and implements changes to enhance network security as part of our cloud infrastructure transformation. - Design security solutions that maintain security and compliance within public cloud while ensuring alignment of technology to business strategy. - Develop and understand JHA’s public cloud strategic roadmap and continuously identify gaps in cloud security program coverage. - Work with the Digital Cloud DevOps team to integrate and operationalize security within their workflows. - Participate and collaborate in project level architecture reviews and vendor selection recommendations. - Assist in creating security architecture documentation based on specifications. - Review security design to discover any errors or confirm the design meets required specifications. - Build and maintain secure CI/CD workflows using GitHub Repositories, GitHub Actions, GitHub Docs, and GitOps operating patterns. - Champion and implement Security as Code principles from design through deployment. - Engineer and operate Cloud Security Posture Management (CSPM) solutions across AWS, Azure, and GCP. - Build, test, validate, and promote cloud security controls into production workloads. - Perform ongoing cloud control effectiveness evaluations and contribute to ICS security architecture. - Use Terraform to build, deploy, and manage cloud security infrastructure and guardrail configurations. - Develop automation using Python to support monitoring, remediation, CI/CD integrations, and guardrail enforcement. - Performs other duties as assigned. What you’ll need to have: - Minimum of 6 years of experience in software development, DevOps, or Infrastructure as Code - Building and maintaining secure CI/CD workflows using GitHub Repositories, GitHub Actions, GitHub Docs, and/or GitOps operating patterns - Cloud Security Posture Management (CSPM) Engineering - Hands-on experience deploying and managing containerized applications - Practical experience in declarative service infrastructure environments, specifically using Terraform - Experience in an AWS, Azure, and/or GCP cloud environment What would be nice for you to have - Experience managing production environments in Google Cloud Platform (GCP) - Support cloud security architecture decisions, threat modeling engagements, and change control processes. - Implement serverless automated remediation using AWS Lambda, Azure Functions, and GCP Cloud Functions. - Mentor and coach junior and mid-level engineers. - Lead design discussions, perform peer reviews, and provide guidance on best practices. - Maintain engineering documentation, runbooks, diagrams, and GitHub-based developer guidance. - Production Programming Experience in Go or Python - Familiarity with operating in a Unix/Linux shell. - Industry Certification in Google PCSE, AWS Security, AZ-500, CKS, CCSP, CISSP, CCSK If you got this far, we hope you're feeling excited about this opportunity. Even if you don't feel you meet every single requirement on this posting, we still encourage you to apply. We’re looking for passionate, driven individuals who align with our mission and can bring unique perspectives to our team. Why Jack Henry? At Jack Henry, we live by the motto: “Do the right thing, do whatever it takes, and have fun.” It’s more than a tagline, it’s the foundation of our culture. We recognize that our associates are the key to our success, and we’re deeply committed to their wellbeing. That’s why we offer comprehensive benefits designed to support your physical, mental, and financial health so you can thrive both personally and professionally. We’re also leading the way in technology modernization, helping financial institutions evolve with speed, security, and flexibility. Our strategy focuses on delivering secure data access, mitigating fraud, and enabling seamless integration. Empowering our teams to build innovative solutions that meet the evolving needs of accountholders. Culture of Commitment Ask our associates why they love Jack Henry, and many will tell you it is because our culture is exceptional. We do great things together. Our culture empowers us to rise to challenges, seek new opportunities, and support one another through change. It’s this shared commitment that drives our success. We’re proud to foster an environment where inclusion, sustainability, and community impact are more than values, they’re how we operate. Visit our Corporate Sustainability site to learn more about our culture and commitment to our people, customers, community, environment, and shareholders. Equal Employment Opportunity At Jack Henry, we know we are better together. We value, respect, and protect the uniqueness each of us brings. Innovation flourishes by including all voices and makes our business - and our society - stronger. Jack Henry is an equal opportunity employer and we are committed to providing equal opportunity in all of our employment practices, including selection, hiring, performance management, promotion, transfer, compensation, benefits, education, training, social, and recreational activities to all persons regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, genetic information, pregnancy, marital status, sex, gender, gender identity, gender expression, age, sexual orientation, and military and veteran status, or any other protected status protected by local, state or federal law. No one will be subject to, and Jack Henry prohibits, any form of discipline, reprisal, intimidation, or retaliation for good faith reports or complaints of discrimination of any kind, pursuing any discrimination claim, or cooperating in related investigations. Requests for full corporate job descriptions may be requested through the interview process at any time.

Title: Information Security Engineer 4 - Contingent Location: Charlotte, NC, United States (Hybrid) Job Description: Azure EDR gcp IDS/IPS Cissp Information Security AWS GIAC SIEM CISM Title: Information Security Engineer Location: 300 S Brevard St Charlotte, NC Duration: 18 months Work Engagement: W2 Work Schedule: 3 days in office/2 days remote Benefits on offer for this contract position: Health Insurance, Life insurance, 401K and Voluntary Benefits Summary: We are seeking a highly skilled Information Security Engineer to lead and support advanced cybersecurity initiatives. This role is responsible for handling complex security incidents, performing deep technical investigations, and designing robust security solutions across the enterprise. The ideal candidate will bring strong expertise in incident response, risk management, and modern security technologies, along with the ability to collaborate and influence across teams. Responsibilities: - Lead and manage computer security incident response activities for highly complex and high-impact events - Conduct technical investigations and digital forensics to determine root cause and recommend mitigation strategies - Provide security consulting to internal stakeholders, ensuring alignment with corporate security policies, standards, and best practices - Design, document, test, and maintain advanced security solutions, including: - Networking security - Cryptography - Cloud security - Authentication and directory services - Email and internet security - Application and endpoint protection - Analyze and correlate security logs to detect anomalies and support investigations - Apply subject matter expertise to implement and enhance key information security domains, including: - Threat identification and modeling - Risk management - Monitoring and incident response - Access management - Confidentiality, integrity, and availability controls - Business continuity planning - Identify vulnerabilities, conduct risk assessments, and evaluate remediation options - Collaborate with and influence cross-functional teams and leadership - Lead and mentor a team to successfully achieve security objectives Requirements: - Applicants must be authorized to work for ANY employer in the U.S. This position is not eligible for visa sponsorship. - Proven Information Security Engineering experience - Strong experience in incident response, threat analysis, and vulnerability management - Deep understanding of enterprise security architecture and technologies - Proven ability to lead projects and influence stakeholders at all levels - Excellent analytical, problem-solving, and communication skills - Experience with cloud platforms (e.g., AWS, Azure, GCP) - Relevant certifications such as CISSP, CISM, CEH, or GIAC - Experience in security tools such as SIEM, EDR, IDS/IPS, or DLP solutions - Prior leadership or team management experience

• Perform complex administrative/operational tasks from security processes • Carry out measurements and tests for selected subject fields related to security/data protection • Participate in the definition and performance of tests as part of security management and reviews in the task field • Plan and procure technical equipment (e.g., measuring devices, testing tools) • Run selected reference systems for security systems and specific security management tools, including managing applications/providing technical support, in the task field • Provide technical support for security management systems • Commercially evaluating security measures; acting as a point of contact for Group units as part of the implementation process • Support employees regarding security topics • Analyze and preparing data and information on security topics • Being involved in projects