Principal Cloud Security Engineer
$155,800–$224,200 year
On-siteSan Jose, California, United States
Job Summary
Design, implement, and automate security architectures across AWS and Microsoft Azure environments, integrating policy-as-code into CI/CD pipelines. Define and enforce security frameworks for AI/ML systems across the full model lifecycle, mitigating risks like prompt injection and data poisoning. Manage Data Security Posture Management capabilities to reduce sensitive data exposure while enforcing encryption and access governance. Lead security assessments, threat modeling, and incident response activities for cloud, AI, and data platforms. Collaborate with engineering teams to embed secure practices into MLOps pipelines and drive adoption of standards aligned with NIST and Zero Trust principles. Report to Senior Manager, Cloud Engineering in a fully on-site role in San Jose, CA.
Required Qualifications
- Bachelor's degree in computer science, Engineering, Information Technology, Cybersecurity, or related field
- 10+ years of experience in security engineering, cloud security architecture, or cybersecurity operations
- Strong hands-on expertise with AWS and/or Microsoft Azure security services and cloud-native architectures
- Experience implementing security automation within CI/CD and Infrastructure-as-Code environments
- Deep understanding of IAM, network security, encryption, secrets management, logging, monitoring, and threat detection
- Experience securing enterprise data platforms and modern cloud-native applications
- Strong knowledge of security frameworks and best practices including NIST, CIS, Zero Trust, and secure SDLC principles
- This is a fully on-site, in office role 5 days a week
- based in San Jose, CA
Desired Qualifications
- Experience securing AI/ML platforms, GenAI services, or MLOps pipelines
- Familiarity with AI governance, AI security risks, and emerging regulatory frameworks
- Experience with DSPM, CSPM, CNAPP, SIEM, SOAR, and modern cloud security tooling
- Security certifications such as CISSP, CCSP, CCSK, AWS Certified Security Specialty, or Microsoft Certified: Azure Security Engineer Associate
- Preferred additional certifications or training in AI security or data privacy/security domains (e.g., CDPSE, CIPP, AI security certifications)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.