Cloud Application & AI Security Engineer

Zoetis; Oregon; Híbrido; USD 93.000 - 140.000; Tempo integral

Benefícios oferecidos por esta vaga

Health benefits from day one

401K with match

Profit-sharing

4 weeks vacation

Resumo da vaga

Zoetis is seeking an experienced Cloud Security professional to join the Tech and Digital organization. You will strengthen security for Azure and AWS, implement risk-based controls, and collaborate with engineering and business teams to secure cloud resources and applications.

You will support SAST, DAST, and SSPM, contribute to AI security assessments, and provide practical guidance across design, implementation, and ongoing operations. This remote role offers growth within a global company.

Qualificações

• Bachelor's degree in a related field.
• 5+ years IT/security experience.
• Certifications such as Azure/AWS or CISSP preferred.
• Strong written and verbal communication skills.
• Ability to collaborate across technical and business teams.
• Fluency in English.

Responsabilidades

• Strengthen security of Zoetis' Azure and AWS cloud environments with risk-based practices.
• Apply cloud security standards across architecture, infrastructure and applications.
• Support SAST/DAST/SSPM capabilities.
• Promote least-privilege access and Entra ID security practices.
• Support security assessments for AI initiatives and safeguards.
• Partner with engineering, privacy, risk, compliance and business teams to improve security.
• Identify and communicate security risks and requirements to stakeholders.
• Contribute to cloud security reviews, threat modeling and security standards.

Conhecimentos

Azure security

AWS security

SAST/DAST/SSPM

Entra ID security

IaC tooling

Scripting (PowerShell, Python)

DevOps tools

Threat modeling

AI security considerations

Formação

Bachelor's degree in CS/IS/Business

Ferramentas

Terraform

PowerShell

Python

Ansible

Docker

GitHub Actions

Azure DevOps

Descrição da vaga

Position Summary

Zoetis' Tech and Digital (ZTD) organization is seeking an experienced Cloud Security professional to support its Cloud Security function. In this role, you will help strengthen and evolve security standards for cloud resources and applications, contribute to key security initiatives, and partner with engineering and business teams to design and implement practical, risk-based security controls. You will help enhance how Zoetis secures, governs, manages, and monitors its cloud environments, with a primary focus on Microsoft Azure and Amazon Web Services (AWS). The role will also support application security capabilities, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and SaaS Security Posture Management (SSPM). You will also contribute to AI security by supporting security assessments for new AI initiatives during the intake process and helping ensure appropriate safeguards are considered. Working collaboratively across technical and business teams, you will provide technical guidance and risk-based recommendations throughout the design, implementation, and ongoing support of security solutions.

Position Responsibilities

• Strengthen and support the security of Zoetis' Azure and AWS cloud environments through effective, risk-based security practices.
• Apply cloud security standards across architecture, infrastructure, and applications while balancing security requirements with business objectives.
• Support application security and vulnerability management capabilities, including SAST, DAST, and SSPM.
• Promote secure identity and access management practices, including least-privilege access across cloud environments and Microsoft Entra ID.
• Support security assessments for new AI initiatives and help ensure appropriate safeguards are identified and implemented.
• Partner with engineering, architecture, privacy, risk, compliance, and business teams to improve security and support organizational objectives.
• Identify and communicate security risks, recommendations, and technical requirements to both technical and non-technical stakeholders.
• Contribute to cloud security reviews, risk assessments, security standards, threat modeling, and other cross-functional security initiatives.

Education & Experience

• Bachelor's degree in Computer Science, Information Systems, Business Administration, or a related field required.
• 5+ years of experience in IT, information security, cybersecurity, or a related field, preferably within a corporate or enterprise environment.
• Relevant professional certifications, such as Microsoft Azure, AWS, or CISSP, are preferred.
• Strong written and verbal communication skills, with the ability to translate technical security concepts for both technical and business audiences.
• Demonstrated ability to build effective working relationships and establish credibility through sound judgment, integrity, and follow-through.
• Strong analytical and problem-solving skills, with the ability to identify security risks, evaluate options, and recommend practical solutions.
• Ability to manage multiple priorities and remain organized in a fast-paced environment.
• Demonstrated initiative and ability to work independently while contributing effectively within a collaborative team.
• Ability to work successfully across technical and business functions within a matrixed organization.
• Strong customer-service orientation with a commitment to responsive, high-quality support.
• Fluency in written and spoken English required.

Technical Skills & Requirements

• Experience supporting cloud security solutions in Microsoft Azure and/or AWS; experience working across both cloud environments is preferred.
• Working knowledge of Microsoft Entra ID security and administration, including application registrations, enterprise applications, service principals, API permissions, OAuth 2.0/OpenID Connect, admin consent, credential management, access reviews, and least-privilege practices.
• Experience with scripting, automation, or infrastructure-as-code technologies such as Terraform, PowerShell, Python, or Ansible to support secure cloud deployments and operations.
• Familiarity with security tools and practices related to Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlement Management (CIEM), Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Security Information and Event Management (SIEM), and cloud-native security monitoring.
• Experience with DevOps and cloud deployment tools or processes such as Terraform, Ansible, Docker, GitHub Actions, or Azure DevOps.
• Experience contributing to cloud security reviews, threat modeling, risk assessments, security standards, vulnerability management, or cross-functional security initiatives.
• Familiarity with security considerations for AI, machine learning, or generative AI, including areas such as data protection, access controls, secure integrations, prompt-injection risks, data leakage, logging, monitoring, and third-party AI services.
• Ability to collaborate effectively with engineering, architecture, privacy, risk, and compliance teams and provide clear, practical technical guidance.

Physical Position Requirements

• Remote position.
• Approximately 5%-10% travel may be required.

Compensation & Benefits

The U.S. base salary range for this full-time position is $93,000 to $140,000. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the base pay target range for new hire salaries for the position. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. This position is also eligible for short-term incentive compensation. This position is also eligible for long-term incentives. In addition to compensation, Zoetis offers a comprehensive benefits package that supports the physical, emotional and financial wellbeing of our colleagues and their families including healthcare and insurance benefits beginning on day one, a 401K plan with a match and profit-sharing contribution from Zoetis, and 4 weeks of vacation. Visit zoetisbenefits.com to learn more.

Equal Opportunity

Zoetis is committed to equal opportunity in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, disability or veteran status or any other protected classification. Disabled individuals are given an equal opportunity to use our online application system. We offer reasonable accommodations as an alternative if requested by an individual with a disability. Please contact Zoetis Colleague Services at to request an accommodation. Zoetis also complies with all applicable national, state and local laws governing nondiscrimination in employment as well as employment eligibility verification requirements of the Immigration and Nationality Act. All applicants must possess or obtain authorization to work in the US for Zoetis. Zoetis retains sole and exclusive discretion to pursue sponsorship for the acquisition or maintenance of nonimmigrant status and employment eligibility, considering factors such as availability of qualified US workers. Individuals requiring sponsorship must disclose this fact. Please note that Zoetis seeks information related to job applications from candidates for jobs in the U.S. solely via the following: (1) our company website at site, or (2) via email to/from addresses using only the Zoetis domain of \"@zoetis.com\". In addition, Zoetis does not use Google Hangout for any recruitment related activities. Any solicitation or request for information related to job applications with Zoetis via any other means and/or utilizing email addresses with any other domain should be disregarded. In addition, Zoetis will never ask candidates to make any type of personal financial investment related to gaining employment with Zoetis.