Cloud & Container Security Specialist

Prudential Annuities Distributors (PAD); Newark (NJ); Hybrid; USD 96,000 - 159,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) plan with company match

Pension plan

Wellness program reimbursement

Education benefit

Employee Stock Purchase Plan

Discretionary annual incentive

Hybrid work arrangement

Job summary

Prudential Annuities Distributors (PAD) in Newark, NJ, seeks a Specialist for Cloud/Containers on the Attack Surface Management Team to partner with the Information Security Office and CTO. You will drive cloud security maturity, support implementation, and own deliverables while triaging misconfigurations and improving controls across the enterprise.

You will lead SMB guidance, reporting, and collaboration with engineering to reduce risk, validate mitigations, and evolve security metrics and

Qualifications

• Demonstrated expertise in cloud and container security.
• Expertise in container technologies (Docker, Kubernetes, EKS/ECS).
• Familiarity with compliance frameworks and security posture management tools.
• Experience improving cloud compliance posture management processes and assessments of risk for container and cloud environments.
• Ability to collaborate with engineering teams to provide SME knowledge of vulnerabilities and mitigations.
• Engineering mindset – systems thinking, creative problem solving, deductive reasoning.
• Effective communication and documentation.

Responsibilities

• Contribute to the design, development, implementation, and enhancement of Prudential’s cloud and container monitoring and assessment capabilities
• Triage, prioritize, drive remediation, and validate mitigating controls of cloud and container-related misconfiguration findings and drive continuous monitoring against industry and enterprise security posture
• Proactively identify and implement security improvements in the environment, especially those related to prevention and validation.
• Examine current state, industry/technology trends, and business requirements to drive innovation.
• Provide SME guidance and review to stakeholders on remediation, exception requests, prioritization, and mitigations
• Provide updates regarding compliance and risk across multiple platforms and groups
• Share and evolve reporting metrics that relay proper risk posture to leadership
• Ideate and implement improvements to processes, metrics, and documentation to mature security posture and risk management capabilities.
• Partner with leadership to set direction for the future of the Attack Surface Management program, while ensuring an accurate understanding and in-depth knowledge of daily operations to provide recommendations to team objectives.
• Develop security policies and compliance initiatives derived from industry standards

Skills

Cloud security

Container security

SecDevOps

Python scripting

PowerShell

Bash

Automation

CI/CD

Threat modeling

Tools

Docker

Kubernetes

EKS/ECS

Job description

Your Team & Role

As a Specialist for Cloud/Containers on the Attack Surface Management Team, you will partner with other security professionals across the Information Security Office, the Chief Technology Office, and other groups in Prudential to drive Prudential’s Cloud security efforts across the global enterprise. You will support implementation and operational best practices, while contributing to or owning deliverables and project workstreams around cloud security maturity. You will also perform triage of issues related to technology configuration, software weaknesses, build/deployment, and process challenges. You will work on significant and unique issues where analysis of situations or data requires an evaluation of intangible variables and may impact future concepts, products or technologies to ensure security of our products and customers! In addition to applied experience, you will bring excellent problem solving, communication and teamwork skills, along with agile ways of working, strong business insight, an inclusive leadership attitude and a continuous learning focus to all that you do.

Here is What You Can Expect on a Typical Day

• Contribute to the design, development, implementation, and enhancement of Prudential’s cloud and container monitoring and assessment capabilities
• Triage, prioritize, drive remediation, and validate mitigating controls of cloud and container-related misconfiguration findings and drive continuous monitoring against industry and enterprise security posture
• Proactively identify and implement security improvements in the environment, especially those related to prevention and validation.
• Examine current state, industry/technology trends, and business requirements to drive innovation.
• Provide SME guidance and review to stakeholders on remediation, exception requests, prioritization, and mitigations
• Provide updates regarding compliance and risk across multiple platforms and groups
• Share and evolve reporting metrics that relay proper risk posture to leadership
• Ideate and implement improvements to processes, metrics, and documentation to mature security posture and risk management capabilities.
• Partner with leadership to set direction for the future of the Attack Surface Management program, while ensuring an accurate understanding and in-depth knowledge of daily operations to provide recommendations to team objectives.
• Develop security policies and compliance initiatives derived from industry standards

The Skills & Expertise You Bring

Demonstrated expertise in cloud and container security Expertise in container technologies (Docker, Kubernetes, EKS/ECS) Skilled in compliance posture to risk and threat correlation Familiarity with compliance frameworks and security posture management tools, as well as common vulnerability data sources and frameworks Experience improving cloud compliance posture management processes as well as assessments of risk management for container and cloud environments. Ability to collaborate with engineering teams to provide SME knowledge of vulnerabilities associated with cloud and container workloads that validate risk reduction effectiveness and reduction of false positives, and consult on mitigations Engineering mindset – systems thinking, creative problem solving, deductive reasoning Effective communication and documentation

Preferred qualifications

• Experience with CI/CD and SecDevOps
• Scripting background (Python, PowerShell, Bash, etc.)
• Familiarity with cloud posture management tools CSPM and frameworks
• Familiarity with audit processes and evidence requirements.
• Understanding of threat actors, with the ability to articulate or demonstrate how they operate and subvert common security controls
• Knowledge of industry security standards and frameworks (CIS, NIST, SOC2, PCI/DSS, DORA) and ability to translate those into policy and controls.
• Familiarity with automation and Agentic AI runtimes a plus

You’ll Love Working Here

You’ll Love Working Here Because You Can Join a team and culture where your voice matters; where every day, your work transforms our experiences to make lives better. As you put your skills to use, we’ll help you make an even bigger impact with learning experiences that can grow your technical AND leadership capabilities. You’ll be surprised by what this rock-solid organization has in store for you.

#LI-Hybrid

What we offer you:

The salary range for this role is from $96,200.00 to $158,800.00.

• Market competitive base salaries, with a yearly bonus potential at every level.
• Medical, dental, vision, life insurance, disability insurance, Paid Time Off (PTO), and leave of absences, such as parental and military leave.
• 401(k) plan with company match (up to 4%).
• Company-funded pension plan.
• Wellness Programs including up to $1,600 a year for reimbursement of items purchased to support personal wellbeing needs.
• Work/Life Resources to help support topics such as parenting, housing, senior care, finances, pets, legal matters, education, emotional and mental health, and career development.
• Education Benefit to help finance traditional college enrollment toward obtaining an approved degree and many accredited certificate programs.
• Employee Stock Purchase Plan: Shares can be purchased at 85% of the lower of two prices (Beginning or End of the purchase period).
• Eligibility to participate in a discretionary annual incentive program is subject to the rules governing the program, whereby an award, if any, depends on various factors including, without limitation, individual and organizational performance.
• Some of the above benefits may not apply to part-time employees scheduled to work less than 20 hours per week.

Prudential Financial, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, ancestry, sex, sexual orientation, gender identity, national origin, genetics, disability, marital status, age, veteran status, domestic partner status, medical condition or any other characteristic protected by law.