Cloud Security Engineering Specialist

• Location: Remote
• Department: Security
• Schedule: Full Time | Days

• Cloud Security Engineering: Design, implement, and continuously improve security across enterprise multi-cloud environments (Azure, GCP, and OCI) by developing secure landing zones, cloud security architectures, identity controls, Infrastructure as Code (Terraform) guardrails, and Kubernetes/container security capabilities.
• CNAPP & Cloud Risk Management: Engineer and optimize Cloud-Native Application Protection Platform (CNAPP) capabilities. Drive vulnerability prioritization, remediation strategies, configuration drift detection, and continuous compliance across cloud environments.
• Threat Detection & Security Automation: Develop automated security controls, policy enforcement, and remediation workflows to improve cloud visibility, operational efficiency, and secure-by-default deployments.
• AI Security & Governance: Partner with AI Security, AI Engineering, and Cloud Engineering teams to assess AI technologies and workloads, prioritize and mitigate AI-related risks, develop cloud and AI security standards and technical controls, and support the secure AI development lifecycle (AI SDLC).
• Technical Leadership & Security Standards: Develop cloud security standards, perform design reviews and threat modeling, evaluate emerging technologies, and mentor team members through technical guidance, knowledge sharing, and hands-on coaching.

Education:

• High School diploma equivalency with 2 years of cumulative experience OR Associate's degree/Bachelor's degree OR 4 years of applicable cumulative job specific experience required.

Additional Preferences:

• Cloud Security & CNAPP Technical Expertise: 5+ years of hands-on experience engineering, securing, and operating enterprise cloud environments across Azure, GCP, or OCI—including deep technical expertise in cloud networking, IAM, Kubernetes/containers, Infrastructure as Code (Terraform), CI/CD security, and cloud logging. Requires proven experience deploying and managing leading CNAPP platforms (such as Wiz, Prisma Cloud, Orca, Defender for Cloud, or Upwind); relevant certifications like CCSP or CISSP are preferred.
• AI Workload Security & Governance: Advanced understanding of modern AI security concepts, including the OWASP Top 10 for LLM Applications, AI-specific threat vectors and risks, secure AI SDLC practices, and governance frameworks for enterprise AI workloads.