The Cloud Security & Automation Engineer is a hands-on engineering role responsible for improving security across public cloud, hybrid, container, and cloud-native environments. The role owns the day-to-day engineering and operation of cloud exposure management capabilities, including platforms such as Wiz or Prisma Cloud, and converts prioritized risk into durable technical controls, automated workflows, and measurable remediation outcomes. The engineer will work closely with Vulnerability Management and AI Security Teams.
Cloud exposure management and platform ownership Configure, administer, optimize, and troubleshoot cloud security and exposure management platforms such as Wiz or Prisma Cloud. Manage cloud account and subscription onboarding, connectors, permissions, policies, rules, integrations, dashboards, and platform health across Azure, AWS, and other in-scope cloud services.
CTEM operations and risk prioritization Support the continuous threat exposure management lifecycle by identifying and validating cloud exposures, analyzing attack paths and toxic combinations, prioritizing material risk, coordinating remediation with accountable teams, validating closure, and tracking exceptions. Translate platform findings into a focused, risk-based backlog rather than a high-volume queue of uncontextualized alerts.
Security automation and engineering Design and build reusable automation for cloud security operations using Python, PowerShell, REST APIs, JSON/YAML, workflow orchestration, serverless services, and Infrastructure as Code. Automate asset onboarding, policy deployment, enrichment, ticket routing, evidence collection, remediation validation, reporting, and other repeatable engineering tasks.
Cloud security architecture and guardrails Define and implement cloud security requirements, reference patterns, preventive guardrails, and detective controls for identity, network, workload, container, Kubernetes, data, secrets, logging, and configuration security. Contribute security requirements to cloud landing zones and platform engineering standards.
Cross-functional remediation and enablement Partner with Cloud, DevOps, Vulnerability Management, IAM, infrastructure, and application teams to assign ownership, develop practical remediation patterns, integrate controls into delivery workflows, and improve adoption of secure cloud practices.
AI security partnership Provide cloud security engineering for AI platforms and services, including secure architecture reviews, identity and non-human identity controls, secrets management, data-flow protection, logging and monitoring, exposure analysis, and automation. Help translate emerging AI security requirements into repeatable cloud controls and engineering patterns.
Metrics, governance, and continuous improvement Develop dashboards and operating metrics for cloud coverage, critical exposures, attack paths, remediation aging, exceptions, automation effectiveness, and control adoption. Use metrics to identify systemic issues and recommend improvements to architecture, tooling, and operating processes.
Incident support and technical escalation Provide cloud security expertise during investigations and incidents, including exposure validation, cloud configuration analysis, identity and access review, log analysis, containment support, and corrective-action engineering. Participate in senior escalation or Person in Charge coverage when assigned.
Standards, documentation, and knowledge sharing Create and maintain technical standards, standard operating procedures, runbooks, architecture diagrams, operational playbooks, and control documentation. Share knowledge through design reviews, demonstrations, and hands-on coaching.
Technical leadership and recruiting Lead technical workstreams, mentor engineers, review designs and automation, and contribute to resume reviews, technical interviews, and practical assessments for cloud security engineering roles.