Senior Cloud Security Engineer

ComPsych is modernizing its security capabilities as it migrates to the cloud and integrates AI into its products. The Senior Cloud Security Engineer will lead security across cloud, network, application, data, information, and AI domains, from designing controls and guardrails to managing detection, response, and vulnerability remediation.

Responsibilities:

• Secure the cloud, by design and in code. Own cloud security posture management across configuration, workloads, and entitlements (CSPM, CWPP, and CIEM); identity and access management and least privilege, including federation and single sign on, secrets management, privileged access, and workload and non human identities; network segmentation; container security; encryption and key management; and guardrails delivered as policy as code across our cloud environments (AWS primary, Azure), so the secure path is the default for every team
• Build application security into the pipeline. Shift security left in CI/CD with static, dynamic, and dependency and software supply chain scanning, threat modeling, secrets management, and secure by design reviews, so product teams ship safely by default
• Engineer network security for a cloud first estate. Design segmentation and zero trust access, firewalls and web application firewalls, and traffic inspection across cloud and hybrid networks, automated and observable rather than manually maintained
• Protect the data and engineer privacy in. Lead data classification, encryption and tokenization, key management, and data loss prevention, with privacy by design for PHI and ePHI and awareness of data residency and cross border handling across our domestic and international footprint
• Secure the AI systems we build. Design guardrails, data protection, and abuse and misuse controls for AI, machine learning, and generative AI, addressing risks like prompt injection, model and data poisoning, and sensitive data leakage, and build the monitoring to catch them
• Own detection, response, and vulnerability management. Tune SIEM and cloud native detections, drive event correlation and incident response, run vulnerability scanning and coordinate penetration testing, and turn findings into fixes with real remediation timelines
• Advance information security and make secure the easy default. Maintain security baselines and configuration compliance, and the controls, logging, and audit evidence that keep us compliant, coaching engineers across teams rather than gatekeeping
• Perform other duties as assigned

Requirements:

• Candidates with different levels of experience and strong equivalent experience are encouraged to apply
• Education: Bachelor's degree in Computer Science or a related field
• 6 to 9 years of security engineering experience with hands on cloud experience, as a guideline rather than a hard requirement
• Agentic AI tools are your primary surface for security engineering, analysis, detection, and automation, and you apply hard judgment to what they produce, not an occasional assist
• Senior level breadth across network security, application security, cloud security, information security, and the emerging discipline of AI security, with real depth in several of them
• You build controls as code, including policy as code, infrastructure as code, automation, and detections, and you have operated them in production, including carrying on call and incident load
• Cloud security depth in AWS (primary) and Azure: identity and access management and least privilege, identity federation and single sign on, secrets management, privileged access, and workload and non human identities; network security; container security including image scanning and runtime protection; key management and encryption; and cloud security posture management across configuration, workloads, and entitlements (CSPM, CWPP, and CIEM)
• Data protection and privacy engineering: data classification, encryption, tokenization, and key management, data loss prevention, and privacy by design for regulated health data, with data residency awareness across domestic and international operations
• Application and product security depth: secure software development lifecycle, threat modeling, static, dynamic, and software composition analysis, secrets and software supply chain security, and API security
• Detection, response, and vulnerability management depth: SIEM and cloud native detection, log and event correlation, vulnerability scanning and management, and coordinating penetration testing and remediation to closure
• AI security awareness and a point of view: securing AI and generative AI systems against risks like prompt injection, data and model poisoning, and data leakage
• You build to the frameworks we operate under, domestic and international: HIPAA, HITRUST, SOC 2, NIST, ISO 27001, ISO 42001, and GDPR
• Self-starter with ability to multi-task and work autonomously
• Excellent organizational and project management skills
• Effective interpersonal and communication skills
• security certifications such as CISSP or a cloud security specialty are a plus
• familiarity with references like the OWASP Top 10 for LLM Applications and MITRE ATLAS a plus