Cloud Security Engineer

At Rogo, we are building Wall Street's first true AI analyst. Our mission is to empower finance professionals at the world’s top investment banks, private equity funds, and investment firms with AI that delivers unparalleled speed, accuracy, and insight. We are not just improving financial workflows; we are redefining them from the ground up.

This is a unique opportunity to join a generational company at a key inflection point. With a rapidly growing client base, proven product-market fit, and backing from world-class investors, we are scaling quickly and defining a new category of enterprise AI.

Our team is sharp, motivated, and deeply committed to the mission. We operate with intensity, take ownership of complex problems, and stay relentlessly focused on our users. If you thrive in a fast-paced environment, demand excellence, and want to help build the future of finance, we invite you to join us.

Rogo is hiring a Cloud Security Engineer to lead the design and implementation of cloud security architecture across AWS and GCP. This is a deeply hands-on role for an engineer who has built and operated secure cloud platforms at scale and prefers solving security problems through code, systems design, and automation rather than policy alone.

You will own the technical direction of cloud security at Rogo: designing secure primitives, authoring Terraform at scale, shaping identity and network architecture, and embedding security into the core platform. You will operate as a senior technical leader while remaining highly tactical, writing production code, reviewing infrastructure changes, and unblocking teams with pragmatic security solutions.

Architect and implement cloud security foundations across AWS and GCP, including account/project structure, IAM models, network segmentation, and secure service-to-service communication.

Own and author Terraform-based security architecture, including: Reusable, opinionated Terraform modules for IAM, networking, logging, and encryption Policy enforcement and guardrails that prevent insecure infrastructure from being deployed Secure defaults embedded directly into infrastructure primitives