AI/Cloud Security Engineer

MedReview•New York, NY

11d•Hybrid

About The Position

The AI/Cloud Security Engineer is responsible for testing, installing, configuring, and maintaining cloud security solutions/tools. Additionally, AI/Cloud Security Engineer communicates findings, incidents, and concerns to security team members and leadership in a timely manner. The AI/Cloud Security Engineer should possess a strong background in AI usage to secure MedReview’s Cloud and AI Infrastructure. This role is onsite Monday - Thursday and remote on Fridays.

Requirements

Very strong hands on 5-10 years' experience in Cloud Information Security and AI Security Engineering.
Must demonstrate hands-on experience levering AI and machine learning technologies to enhance overall security.
Strong Identity and Access Management (IAM), Role-Based access Control (RBAC) experience
Strong Purview Environment Experience
Experience monitoring Cloud Infrastructure and systems for security breaches or intrusions and working with SOC team to remediate.
Documentation of security tools, deployment configuration, incident reports, etc.
Ability to communicate technical information in a clear manner, both written and verbally, to end users
Availability to work nights and weekends during (un)planned outages and other special circumstances, with 24/7 accountability.
Availability to enter on call rotation.
Ability to lift 50 lbs.

Nice To Haves

Experience in some specific vertical industry (Healthcare) preferred.
CISSP, CISM, CISA, CCSP, ITIL, IaaS, PaaS, SaaS, Azure Security Engineer Associate, or other related certification preferred.
Experience with HIPAA, HITRUST, ISO 42001 ISO 27001, ISO 27002, URAC regulations and awareness and/or experience with CMS, NIST and other healthcare related regulations preferred.

Responsibilities

Standardizing Azure Security best practices, processes, and procedures.
Experience using AI/ML-driven security tools for anomaly detection, behavioral analysis, bias testing, and threat intelligence correlation.
Ability to design, deploy, and tune AI-based security models to identify malicious traffic, lateral movement, and zero-day threats.
Proficiency in integrating AI-powered SIEM, SOAR, NDR, and XDR platforms to automate incident detection and response.
Knowledge of adversarial AI risks, including model poisoning, evasion attacks, and data integrity threats, and how to mitigate them.
Experience using AI to reduce false positives, prioritize alerts, and improve mean time to detect (MTTD) and respond (MTTR).
Extensive Knowledge of utilizing and implementing Microsoft Purview and all its features. DLP, Auditing, etc.
Microsoft Entra Internet Access, Microsoft Entra Private Access, and Global Secure Access
M365 Compliance and Security Centers
Collaborating with team members to develop and document security standards and policies that align with industry’s best practices.
Finding gaps with the current security posture and assisting with finding new security products, installation, configuration, and policies & procedures.
Monitoring cloud infrastructure for security breaches. Security incident response and forensic investigation.
Investigations into how incidents and/or breaches occur and Root Cause Analyses (RCA) as a member of the incident response team.
Participation in security tabletop exercises.