Cloud Application & AI Security Engineer

Zoetis is seeking a Cloud Application & AI Security Engineer to strengthen and evolve security standards for cloud resources and applications. The role focuses on security for Azure and AWS environments, application security capabilities, and assessments of new AI initiatives, while providing risk-based guidance across technical and business teams.

Responsibilities:

• Strengthen and support the security of Zoetis’ Azure and AWS cloud environments through effective, risk-based security practices
• Apply cloud security standards across architecture, infrastructure, and applications while balancing security requirements with business objectives
• Support application security and vulnerability management capabilities, including SAST, DAST, and SSPM
• Promote secure identity and access management practices, including least-privilege access across cloud environments and Microsoft Entra ID
• Support security assessments for new AI initiatives and help ensure appropriate safeguards are identified and implemented
• Partner with engineering, architecture, privacy, risk, compliance, and business teams to improve security and support organizational objectives
• Identify and communicate security risks, recommendations, and technical requirements to both technical and non-technical stakeholders
• Contribute to cloud security reviews, risk assessments, security standards, threat modeling, and other cross-functional security initiatives

Requirements:

• Bachelor's degree in Computer Science, Information Systems, Business Administration, or a related field required
• 5+ years of experience in IT, information security, cybersecurity, or a related field
• Strong written and verbal communication skills, with the ability to translate technical security concepts for both technical and business audiences
• Demonstrated ability to build effective working relationships and establish credibility through sound judgment, integrity, and follow-through
• Strong analytical and problem-solving skills, with the ability to identify security risks, evaluate options, and recommend practical solutions
• Ability to manage multiple priorities and remain organized in a fast-paced environment
• Demonstrated initiative and ability to work independently while contributing effectively within a collaborative team
• Ability to work successfully across technical and business functions within a matrixed organization
• Strong customer-service orientation with a commitment to responsive, high-quality support
• Fluency in written and spoken English required
• Experience supporting cloud security solutions in Microsoft Azure and/or AWS
• Working knowledge of Microsoft Entra ID security and administration, including application registrations, enterprise applications, service principals, API permissions, OAuth 2.0/OpenID Connect, admin consent, credential management, access reviews, and least-privilege practices
• Experience with scripting, automation, or infrastructure-as-code technologies such as Terraform, PowerShell, Python, or Ansible to support secure cloud deployments and operations
• Familiarity with security tools and practices related to Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlement Management (CIEM), Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Security Information and Event Management (SIEM), and cloud-native security monitoring
• Experience with DevOps and cloud deployment tools or processes such as Terraform, Ansible, Docker, GitHub Actions, or Azure DevOps
• Experience contributing to cloud security reviews, threat modeling, risk assessments, security standards, vulnerability management, or cross-functional security initiatives
• Familiarity with security considerations for AI, machine learning, or generative AI, including areas such as data protection, access controls, secure integrations, prompt-injection risks, data leakage, logging, monitoring, and third-party AI services
• Ability to collaborate effectively with engineering, architecture, privacy, risk, and compliance teams and provide clear, practical technical guidance
• All applicants must possess or obtain authorization to work in the US for Zoetis
• Individuals requiring sponsorship must disclose this fact
• Relevant professional certifications, such as Microsoft Azure, AWS, or CISSP, are preferred
• experience working across both cloud environments is preferred