CyberSecurity Specialist

TechDigital Group; Phoenix (AZ); On-site; USD 120,000 - 170,000; Full time

Job summary

TechDigital Group is seeking a Cloud Security Engineer to assess OCI services, Oracle SaaS platforms, and third-party SaaS solutions for alignment with security standards.

You will evaluate cloud and SaaS architectures, provide guidance for secure deployment, and support guardrails, automation, and governance programs across cloud environments. Collaboration with engineering and security teams is essential.

Qualifications

• Cloud Assessment: Proven experience performing cloud security assessments within OCI or comparable cloud platforms.
• SaaS Governance: Experience conducting SaaS security reviews and certifications.
• Core Security Concepts: IAM, Network Security, Data Protection, Cloud Logging & Monitoring, Container & Platform Security.
• Infrastructure as Code: Experience reviewing Terraform and cloud architecture designs.
• Foundational Knowledge: Cloud shared responsibility model and secure-by-design principles.
• Soft Skills: Strong written and verbal communication skills.

Responsibilities

• Cloud & SaaS Security Assessment: Conduct security reviews of OCI services, SaaS applications, architectures, integrations, and configurations.
• Security Standards & Governance: Map OCI and SaaS implementations to enterprise controls and industry frameworks; validate secure baselines and reference architectures.
• Cloud & SaaS Security Engineering: Support OCI-native security controls and governance capabilities; assist with automation via IaC and policy-as-code.
• SaaS Security Governance: Perform SaaS onboarding assessments and certification reviews; evaluate SaaS architectures, data flows, and controls.
• Collaboration & Stakeholder Engagement: Partner with cloud engineering, architecture, DevOps, security ops, compliance, procurement, and risk teams.

Skills

OCI security assessments

SaaS governance

IAM & Network Security

Terraform / IaC

Cloud security frameworks

Security posture management

Security reviews & certifications

Communication skills

Tools

Terraform

Job description

Cloud Security Engineer – OCI & SaaS Security

Role Purpose

The Cloud Security Engineer performs security reviews of Oracle Cloud Infrastructure (OCI) services, Oracle SaaS platforms, and third-party SaaS solutions to ensure alignment with enterprise security standards and regulatory requirements. The role evaluates cloud and SaaS solutions across infrastructure, platform, application, and data layers, providing actionable security guidance to support secure-by-design adoption, governance, certification, and onboarding processes. The position also provides engineering support for OCI security capabilities and SaaS security governance programs, helping to establish security guardrails, automate controls, and improve consistency and scalability across cloud and SaaS environments.

Key Responsibilities

1. Cloud & SaaS Security Assessment
   • Conduct security reviews of OCI services, SaaS applications, architectures, integrations, and configurations.
   • Identify security risks, control gaps, and remediation opportunities.
   • Evaluate solutions against enterprise security standards, policies, and regulatory requirements.
   • Provide security guidance for secure deployment and adoption of cloud and SaaS services.
2. Security Standards & Governance
   • Map OCI and SaaS implementations to enterprise controls and industry frameworks (NIST, ISO 27001, CSA CCM, CIS).
   • Validate compliance with secure configuration baselines and reference architectures.
   • Support development and maintenance of OCI and SaaS security standards, guardrails, and onboarding requirements.
   • Assess new cloud and SaaS capabilities and provide security recommendations.
3. Cloud & SaaS Security Engineering
   • Support implementation of OCI-native security controls and governance capabilities.
   • Assist with security automation through Infrastructure-as-Code (Terraform) and policy-as-code frameworks.
   • Support deployment and integration of security monitoring, posture management, and compliance capabilities.
   • Partner with platform engineering teams to embed security into deployment and operational processes.
4. SaaS Security Governance
   • Perform SaaS onboarding assessments and certification reviews.
   • Evaluate SaaS architectures, integrations, data flows, and security controls.
   • Conduct SaaS posture reviews and assess configuration drift, identity governance, and data protection controls.
   • Support SaaS inventory management, Shadow IT discovery, and vendor security assessments.
5. Collaboration & Stakeholder Engagement
   • Partner with cloud engineering, architecture, DevOps, security operations, compliance, procurement, and risk teams.
   • Document findings, recommendations, and evidence to support governance and certification decisions.
   • Provide security expertise during design reviews, onboarding activities, exception management, and remediation efforts.

Technical Security Domains Reviewed

• Identity & Access Management (IAM)
• Network Security
• Data Protection & Encryption
• Logging & Monitoring
• Compute & Container Security
• API Security
• SaaS Security Posture Management (SSPM)
• AI / GenAI Security
• Third-Party & Vendor Risk

Qualifications & Skills

Required Experience & Skills

• Cloud Assessment: Proven experience performing cloud security assessments within OCI or comparable cloud platforms.
• SaaS Governance: Experience conducting SaaS security reviews and certifications.
• Core Security Concepts: Strong understanding of: Identity & Access Management, Network Security, Data Protection, Cloud Logging & Monitoring, Container & Platform Security.
• Tooling & Frameworks: Familiarity with OCI security services, SSPM platforms, CASB technologies, and cloud governance frameworks.
• Infrastructure as Code: Experience reviewing Infrastructure-as-Code (Terraform) and cloud architecture designs.
• Foundational Knowledge: Strong comprehension of cloud shared responsibility models and secure-by-design principles.
• Soft Skills: Strong written and verbal communication skills.

Preferred Experience

• Certifications: Oracle Cloud Infrastructure (OCI) certifications.
• Oracle & SaaS Ecosystem: Direct experience with OCI Cloud Guard, Security Zones, Oracle SaaS platforms, and SaaS Security Posture Management (SSPM).
• Automation: Experience with Policy-as-Code, automated compliance tooling, GitHub, CI/CD pipelines, and cloud security automation.
• Emerging Tech: Experience supporting AI/GenAI security assessments.