Senior Cloud Security Engineer

Posted Tuesday, August 4, 2026 at 4:00 AM

The Senior Cloud Security Engineer will design, implement, and maintain security controls across our multi-cloud environment, with a particular emphasis on securing AI/ML workloads and leveraging AI-driven security tooling. The Senior Cloud Security Engineer will serve as a technical leader, partnering with engineering, application development, and Dev Ops teams to embed security into every stage of the cloud and AI development lifecycle.

• Design and implement secure cloud architecture across AWS and Azure, including identity, network security, encryption, and key management
• Implement cloud-native logging, monitoring, and threat detection to improve visibility and incident response
• Build Infrastructure-as-Code (Terraform, Cloud Formation, Bicep), Policy-as-Code, and automated compliance controls
• Implement and enhance Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), and CNAPP capabilities
• Conduct threat modeling, security architecture reviews, and risk assessments for cloud services and applications
• Design and secure AI/ML environments, including MLOps pipelines, model security, inference endpoints, and AI governance
• Assess and mitigate AI-specific threats, including prompt injection, model poisoning, adversarial attacks, and data leakage
• Partner with engineering and data science teams to implement secure-by-design and privacy-preserving controls for regulated data
• Develop automated detections, SOAR playbooks, and AI-driven threat hunting capabilities
• Lead technical response to cloud and AI security incidents, including forensic analysis and remediation
• Design and implement security controls supporting HIPAA, HITRUST, PCI DSS, SOC 2, NIST CSF, and NIST AI RMF requirements
• Support technical readiness, evidence collection, and remediation activities for security audits and compliance assessments
• Develop and maintain cloud security standards, technical guidance, and AI governance documentation
• Support enterprise risk management and vendor security assessments
• Integrate security throughout the Dev Sec Ops  lifecycle, including application, container, and secrets management
• Develop security metrics, communicate technical risks to stakeholders, and recommend continuous security improvements
• Mentor junior engineers and champion security best practices across engineering teams
• Other duties as assigned
• Use, protect and disclose patients’ protected health information (PHI) only in accordance with Health Insurance Portability and Accountability Act (HIPAA) standards
• Understand and comply with Information Security and HIPAA policies and procedures at all times
• Limit viewing of PHI to the absolute minimum as necessary to perform assigned duties

• High school diploma or equivalent required
• 6+ years of experience in information security, with at least 4 years focused on cloud security engineering
• Deep hands-on expertise in both AWS and Microsoft Azure, including native security services (e.g., AWS Guard Duty, Security Hub, IAM Identity Center; Microsoft Defender for Cloud, Sentinel, Entra )
• Strong knowledge of IAM, zero trust architecture, network security, encryption, and secrets management in cloud environments
• Practical experience securing AI/ML systems or LLM-based applications, or demonstrable working knowledge of AI security frameworks (OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF)
• Proficiency in at least one scripting/programming language (Python preferred) and infrastructure-as-code tooling
• Experience with container and orchestration security (Docker, Kubernetes, EKS/AKS)
• Solid understanding of Dev Sec Ops  practices and CI/CD security integration
• Hands-on experience supporting compliance programs such as…