TRM Labs
Cloud Security Engineer
United States
Stay score
odds of building a lasting career here
Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- The Security team is responsible for and committed to securing all things at TRM.
- From our customers to our code, and everything in between, the security team is involved in all aspects of the business.
- Leverage automation tools, configuration management, and infrastructure-as-code (IaC) solutions to standardize security across all environments
Responsibilities
- BUILD A SAFER WORLD.
- TRM's platforms enable investigators to trace illicit activity, build cases, and construct operating pictures of threat networks.
- Provide technical guidance and leadership as a cybersecurity expert on topics such as architecture, configuration management, and environment design
- Drive security improvements in the GCP environment and perform Identity and Access Management (IAM) in GCP to ensure that principles of least privilege and roles-based access control are maintained
- Our collaborative approach ensures that we not only mitigate these risks but also align our efforts with business goals to protect and drive success.
- We are building a safer world.
- This environment is energizing for people who enjoy building, solving hard problems, and making progress in situations that are not always fully defined.
- We balance speed with high standards, own outcomes end‑to‑end, and invest in getting better everyday.
Requirements
- Relevant industry experience in managing cloud security programs, Identity Access Management (IAM), and cloud-native security solutions (e.g., firewalls)
- Expert-level knowledge of cloud infrastructure components, preferably with GCP
- Experience with infrastructure vulnerability testing tools, Cloud Application Platforms (Heroku), and Infrastructure as code tools (Terraform)
- Operating with a high degree of ambiguity
Skills
- Identify and communicate cloud platform vulnerabilities and mitigation options to stakeholders that balance business agility with security
Compensation
- Your recruiter will present the offer and compensation details.
Company info
- The culture of our team is built on mutual respect, where everyone's opinion is valued and heard.
- We prioritize flexibility and efficiency, always seeking smarter ways to work without compromising quality.
- Transparency is at the heart of how we operate, both within the team and with the business, as we focus on clearly communicating and addressing cyber risks.
- Team's Time Zones:
- Eastern Standard Time (EST - GMT-4)
- Pacific Standard Time (PST - GMT-7)
- Central European Summer Time (CET - GMT+2)
- Learn about TRM Speed in this position:
- Prioritize Rapid Threat Assessments: Efficiently perform security risk assessments and triage vulnerabilities based on immediate risk to the business, focusing on the most critical issues with minimal delays.
- Integrate Security Early in Development: Embed security testing and reviews within our Product Shipping Framework and CI/CD pipelines to ensure that security is automated and runs parallel to the fast-paced development cycle, preventing bottlenecks.
- Proactively Educate Developers: Conduct just-in-time security training for developers and engineers, offering real-time advice and code reviews to help them produce secure code without interrupting their workflow.
- Optimize Tools for Speed: Leverage lightweight and efficient security tools that can be quickly integrated into development environments without slowing down deployments, ensuring continuous and secure product iterations.
- Work Week Travel: This role requires participation in in-person R&D work weeks, typically 1-2 times per quarter, at a TRM hub or other designated location.
This listing is sourced directly from TRM Labs's careers page and normalized into a canonical job model.