Navient
Overview
Our mission is to make higher education accessible and affordable for everyone. We empower students with financial support and help them pay down their debt, so they can get on the right financial track, fast. We build tools that help people feel in control of their financial future, including: Private student loans
- low rates, people-first service, and flexible payments. Student loan refinancing
- break free from high-interest rates or monthly payments. Scholarships
- access to thousands of scholarships to help students pay less.
Earnies are committed to helping students live their best lives, free from the stress of student debt. If youre as passionate as we are about our mission, read more below, and lets build something great together! The Senior Cloud Security Engineer position will report to the Head of Security. As the Senior Cloud Security Engineer, you will: Partner with Infrastructure Engineering to align security controls with architecture, participating in design reviews and threat modeling sessions. Lead infrastructure-focused security initiatives that strengthen system resilience, like backup integrity and network access control. Manage and tune web protection platforms including WAF, bot mitigation, and DDoS tools, collaborating with teams to harden externally exposed services and reduce false positives. Operate and maintain cloud-native security tools including CSPM, XDR, DLP, and CASB to protect sensitive data, detect cloud threats, secure SaaS usage, and enforce secure cloud configurations. Apply secure configuration baselines across AWS, Kubernetes, and containerized environments, integrating them into IaC workflows and CI/CD pipelines to support secure-by-default deployments. Implement secure access technologies including VPNs, remote access, identity-aware proxies, and zero-trust networking solutions, tightly integrating IAM and monitoring across AWS and SaaS platforms. Build and maintain infrastructure telemetry pipelines that feed SIEM, and IDS platforms, correlating events with vulnerability scanning data and tuning detections in collaboration with Security Operations. Automate control enforcement using policy-as-code and integrate cloud telemetry with GRC platforms to streamline compliance workflows and evidence collection.
About You
6+ years of experience in security engineering, infrastructure security, or cloud security roles. 2+ years focused on AWS cloud environments, including security tooling and service hardening. Hands-on experience with SIEM, CSPM, XDR/EDR, CASB, vulnerability scanners, WAF, and DNS filtering. Strong scripting or programming experience (Python, Go, Shell, or equivalent). Familiarity with IaC and cloud automation tools (e.g., Terraform, Ansible, CloudFormation).
Even Better
Professional security certifications (e.g., AWS Security Specialty, GCLD, CCSP, CCSK). Experience with container runtime security and Kubernetes RBAC controls. Familiarity with immutable infrastructure concepts and backup resiliency practices. Working knowledge of regulatory frameworks like SOC 2, FFIEC, GLBA, or NY DFS. Experience supporting detection infrastructure and compliance automation.
Where
This role will be based in the US.
Pay Range $158,000$198,000 USD Earnest believes in enabling our employees to live their best lives. We offer a variety of perks and competitive benefits, including: Health, Dental, & Vision benefits plus savings plans Mac computers + work-from-home stipend to set up your home office Monthly internet and phone reimbursement Employee Stock Purchase Plan Restricted Stock Units (RSUs) 401(k) plan to help you save for retirement plus a company match Robust tuition reimbursement program $1,000 travel perk on each Earnie-versary to anywhere in the world Competitive days of annual PTO Competitive parental leave
What Makes an Earnie
At Earnest, our people bring our cultural principles to life. These principles define how we work, how we win, and what we expect of ourselves and each other: Every Second Counts : Speed is our competitive advantage. Our customers need better solutions, and the faster we execute, the greater our chance of success. Choose To Do Hard Things : We win by tackling the hard things that others avoid, fueled by grit and resilience. Pursue Excellence : Great companies, teams, and individuals never settle and are proud of the work that they do. Whats good enough today wont be good enough tomorrow. Excellence isnt a destination; its a mindset of continuous improvement. Lead Together : Our success comes from how we work together. Leadership is not about titlesit is about action. We take ownership, drive results, and move forward as a team. Dont Take Yourself Too Seriously : We take our work seriously, not ourselves. The stakes are high, but a sense of humor keeps us grounded, creative, and resilient.
Earnest is committed to building an environment where our employees feel included, valued, and heard. We believe that diversity, inclusion, equity, and belonging enable us to move forward with our mission. We encourage anyone to apply if your experience is close to what we are looking for. Earnest provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, veteran status, disability or genetics. Qualified applicants with criminal histories will be considered for the position in a manner consistent with the Fair Chance Ordinance. #J-18808-Ljbffr
Our mission is to make higher education accessible and affordable for everyone. We empower students with financial support and help them pay down their debt, so they can get on the right financial track, fast. We build tools that help people feel in control of their financial future, including: Private student loans
- low rates, people-first service, and flexible payments. Student loan refinancing
- break free from high-interest rates or monthly payments. Scholarships
- access to thousands of scholarships to help students pay less.
Earnies are committed to helping students live their best lives, free from the stress of student debt. If youre as passionate as we are about our mission, read more below, and lets build something great together! The Senior Cloud Security Engineer position will report to the Head of Security. As the Senior Cloud Security Engineer, you will: Partner with Infrastructure Engineering to align security controls with architecture, participating in design reviews and threat modeling sessions. Lead infrastructure-focused security initiatives that strengthen system resilience, like backup integrity and network access control. Manage and tune web protection platforms including WAF, bot mitigation, and DDoS tools, collaborating with teams to harden externally exposed services and reduce false positives. Operate and maintain cloud-native security tools including CSPM, XDR, DLP, and CASB to protect sensitive data, detect cloud threats, secure SaaS usage, and enforce secure cloud configurations. Apply secure configuration baselines across AWS, Kubernetes, and containerized environments, integrating them into IaC workflows and CI/CD pipelines to support secure-by-default deployments. Implement secure access technologies including VPNs, remote access, identity-aware proxies, and zero-trust networking solutions, tightly integrating IAM and monitoring across AWS and SaaS platforms. Build and maintain infrastructure telemetry pipelines that feed SIEM, and IDS platforms, correlating events with vulnerability scanning data and tuning detections in collaboration with Security Operations. Automate control enforcement using policy-as-code and integrate cloud telemetry with GRC platforms to streamline compliance workflows and evidence collection.
About You
6+ years of experience in security engineering, infrastructure security, or cloud security roles. 2+ years focused on AWS cloud environments, including security tooling and service hardening. Hands-on experience with SIEM, CSPM, XDR/EDR, CASB, vulnerability scanners, WAF, and DNS filtering. Strong scripting or programming experience (Python, Go, Shell, or equivalent). Familiarity with IaC and cloud automation tools (e.g., Terraform, Ansible, CloudFormation).
Even Better
Professional security certifications (e.g., AWS Security Specialty, GCLD, CCSP, CCSK). Experience with container runtime security and Kubernetes RBAC controls. Familiarity with immutable infrastructure concepts and backup resiliency practices. Working knowledge of regulatory frameworks like SOC 2, FFIEC, GLBA, or NY DFS. Experience supporting detection infrastructure and compliance automation.
Where
This role will be based in the US.
Pay Range $158,000$198,000 USD Earnest believes in enabling our employees to live their best lives. We offer a variety of perks and competitive benefits, including: Health, Dental, & Vision benefits plus savings plans Mac computers + work-from-home stipend to set up your home office Monthly internet and phone reimbursement Employee Stock Purchase Plan Restricted Stock Units (RSUs) 401(k) plan to help you save for retirement plus a company match Robust tuition reimbursement program $1,000 travel perk on each Earnie-versary to anywhere in the world Competitive days of annual PTO Competitive parental leave
What Makes an Earnie
At Earnest, our people bring our cultural principles to life. These principles define how we work, how we win, and what we expect of ourselves and each other: Every Second Counts : Speed is our competitive advantage. Our customers need better solutions, and the faster we execute, the greater our chance of success. Choose To Do Hard Things : We win by tackling the hard things that others avoid, fueled by grit and resilience. Pursue Excellence : Great companies, teams, and individuals never settle and are proud of the work that they do. Whats good enough today wont be good enough tomorrow. Excellence isnt a destination; its a mindset of continuous improvement. Lead Together : Our success comes from how we work together. Leadership is not about titlesit is about action. We take ownership, drive results, and move forward as a team. Dont Take Yourself Too Seriously : We take our work seriously, not ourselves. The stakes are high, but a sense of humor keeps us grounded, creative, and resilient.
Earnest is committed to building an environment where our employees feel included, valued, and heard. We believe that diversity, inclusion, equity, and belonging enable us to move forward with our mission. We encourage anyone to apply if your experience is close to what we are looking for. Earnest provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, veteran status, disability or genetics. Qualified applicants with criminal histories will be considered for the position in a manner consistent with the Fair Chance Ordinance. #J-18808-Ljbffr