Cloud Platform Security Engineer

Primary Responsibilities

• Collaborate closely with engineering and Al/ML teams to understand their deployment pipelines and security requirements for the specified Al Services.
• Translate security requirements and best practices into automated security policies and controls.
• Develop and maintain security automation solutions/scripts using Python, Go and Power Shell.
• Design, implement, and oversee security solutions and policies for multi-cloud infrastructure (Microsoft Azure, AWS and GCP) focused on Al Services.
• Working closely with vendors and partner squads to develop, deploy, and test security services for Cloud Al Services.
• Stay up-to-date with the latest cloud security trends, vulnerabilities and industry best practices, Al Developments and emerging threats.
• Troubleshooting problems, analyzing root cause, and (where possible) fixing bugs introduced by owned or managed security solutions.
• Develop and deploy security controls leveraging native cloud offerings (e.g. AWS SCP,
  Azure Policy, GCP Org Policies).

• Bachelor's degree in computer science, Information Security, or a related field (or equivalent practical experience).
• Solid foundational knowledge of any Cloud Al Services, including Azure Al, Azure Al Search, Azure Open Al, Azure Al Safety Content, AWS Bedrock, Anthropic on AWS Bedrock, and Google Vertex Al.
  Proficiency with cloud-native security & governance tooling (e.g., Azure Policy, AWS SCP & RCP, GCP Constrains, etc..).
• Experience with Infrastructure-as-code (laC) tools such as Terraform.
• Working knowledge of the Secure SDLC process.
• Familiarity with Logging and data pipeline concepts and architectures in cloud.
• Familiarity in scripting languages such as Power Shell or Python or Bash.
• Familiarity with Policy as Code languages and frameworks such as Rego and OPA Policy engine.
• Familiarity with designing and configuring CICD pipelines.
• Familiarity with Azure Dev Ops, Git Hub Action, and Jenkins.
• Ability to articulate complex technical concepts to non-technical stakeholders.
• Experience with risk control frameworks and engagements with risk and regulatory functions.
• Experience in the financial industry would be a plus.
• Cloud or Cyber Security Certifications would be a plus.
• Experienced working in Agile environment.
• Experience securing Al/ML workloads or data pipeline in the cloud would be a plus.
• Experience with implementing security controls and governance standards in the context of Al Service usages.