Senior Cloud Security Engineer

Job Summary

Required Qualifications

• •High school diploma or equivalent
• •6+ years of experience in information security
• •4 years focused on cloud security engineering
• •Deep hands-on expertise in both AWS and Microsoft Azure
• •Native security services including AWS GuardDuty, Security Hub, IAM Identity Center
• •Native security services including Microsoft Defender for Cloud, Sentinel, Entra ID
• •Strong knowledge of IAM
• •Strong knowledge of zero trust architecture
• •Strong knowledge of network security
• •Strong knowledge of encryption
• •Strong knowledge of secrets management
• •Practical experience securing AI/ML systems or LLM-based applications
• •Demonstrable working knowledge of AI security frameworks including OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF
• •Proficiency in at least one scripting/programming language
• •Infrastructure-as-code tooling
• •Experience with container and orchestration security
• •Docker
• •Kubernetes
• •EKS/AKS
• •Solid understanding of DevSecOps practices
• •CI/CD security integration
• •Hands-on experience supporting compliance programs such as HIPAA, HITRUST CSF, PCI DSS, and SOC 2
• •Audit evidence and control implementation
• •Proficiency in Microsoft Office Suite
• •Excellent written and verbal communication skills
• •Strong problem solving and creative skills
• •Ability to exercise sound judgment and make decisions based on accurate and timely analyses
• •High level of integrity and dependability
• •Strong sense of urgency
• •Results oriented
• •Must possess a smart-phone or electronic device capable of downloading applications
• •Use, protect and disclose patients' protected health information (PHI) only in accordance with Health Insurance Portability and Accountability Act (HIPAA) standards
• •Understand and comply with Information Security and HIPAA policies and procedures at all times
• •Limit viewing of PHI to the absolute minimum as necessary to perform assigned duties
• •Travel may be required for training, conferences, etc.

Desired Qualifications

• •Experience with Google Cloud Platform (GCP)
• •Experience deploying or securing MLOps platforms including SageMaker, Vertex AI, Azure ML, Databricks, Kubeflow
• •Familiarity with AI-driven security platforms and building custom detections using ML techniques
• •Relevant certifications such as CISSP, CCSP, HCISPP, CCSFP (HITRUST), AWS Security Specialty, Azure Security Engineer (AZ-500), GCP Professional Cloud Security Engineer, or GIAC certifications
• •Prior experience in healthcare, health tech, or revenue cycle management environments handling PHI at scale
• •Experience with red teaming or adversarial testing of AI systems
• •Knowledge of data privacy regulations as they apply to AI training data and model outputs, particularly de-identification standards under HIPAA (Safe Harbor and Expert Determination)
• •Contributions to security communities, open-source tooling, or published research
• •Python preferred