Cloud Application & AI Security Engineer
About The Position
Zoetis’ Tech and Digital organization is seeking an experienced Cloud Security professional to support its Cloud Security function. The role strengthens and evolves security standards for cloud resources and applications, contributes to security initiatives, and partners with engineering and business teams to design and implement practical, risk-based controls. The position focuses primarily on Microsoft Azure and Amazon Web Services (AWS), and supports cloud security governance, management, and monitoring. It also supports application security capabilities such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and SaaS Security Posture Management (SSPM). The engineer contributes to AI security by supporting assessments of new AI initiatives during intake and helping identify appropriate safeguards. The role provides technical guidance and risk-based recommendations across the design, implementation, and ongoing support of security solutions. This is a remote, full-time position. Approximately 5%–10% travel may be required. The U.S. base salary range is $93,000–$140,000, and the position is eligible for short-term incentive compensation and long-term incentives. Zoetis offers healthcare and insurance benefits beginning on day one, a 401(k) plan with a company match and profit-sharing contribution, and four weeks of vacation.
Requirements
- Bachelor’s degree in Computer Science, Information Systems, Business Administration, or a related field.
- At least 5 years of experience in IT, information security, cybersecurity, or a related field; corporate or enterprise experience is preferred.
- Experience supporting cloud security solutions in Microsoft Azure and/or AWS.
- Working knowledge of Microsoft Entra ID security and administration, including application registrations, enterprise applications, service principals, API permissions, OAuth 2.0/OpenID Connect, admin consent, credential management, access reviews, and least-privilege practices.
- Experience with scripting, automation, or infrastructure-as-code technologies such as Terraform, PowerShell, Python, or Ansible to support secure cloud deployments and operations.
- Familiarity with security tools and practices related to CSPM, CIEM, SAST, DAST, SIEM, and cloud-native security monitoring.
- Experience with DevOps and cloud deployment tools or processes such as Terraform, Ansible, Docker, GitHub Actions, or Azure DevOps.
- Experience contributing to cloud security reviews, threat modeling, risk assessments, security standards, vulnerability management, or cross-functional security initiatives.
- Familiarity with security considerations for AI, machine learning, or generative AI, including data protection, access controls, secure integrations, prompt-injection risks, data leakage, logging, monitoring, and third-party AI services.
- Strong written and verbal communication skills, including the ability to explain technical security concepts to technical and business audiences.
- Strong analytical and problem-solving skills, sound judgment, integrity, and follow-through.
- Ability to manage multiple priorities, stay organized in a fast-paced environment, and work independently while contributing to a collaborative team.
- Ability to work across technical and business functions in a matrixed organization and provide clear, practical technical guidance.
- Strong customer-service orientation and commitment to responsive, high-quality support.
- Fluency in written and spoken English.
- Applicants must possess or obtain authorization to work in the U.S. for Zoetis.
Nice To Haves
- Experience working across both Microsoft Azure and AWS cloud environments.
- Relevant professional certifications, such as Microsoft Azure, AWS, or CISSP.
Responsibilities
- Strengthen and support the security of Zoetis’ Azure and AWS cloud environments through risk-based security practices.
- Apply cloud security standards across architecture, infrastructure, and applications while balancing security requirements with business objectives.
- Support application security and vulnerability management capabilities, including SAST, DAST, and SSPM.
- Promote secure identity and access management practices, including least-privilege access across cloud environments and Microsoft Entra ID.
- Support security assessments for new AI initiatives and help ensure appropriate safeguards are identified and implemented.
- Partner with engineering, architecture, privacy, risk, compliance, and business teams to improve security and support organizational objectives.
- Identify and communicate security risks, recommendations, and technical requirements to technical and non-technical stakeholders.
- Contribute to cloud security reviews, risk assessments, security standards, threat modeling, and other cross-functional security initiatives.
Benefits
- Healthcare and insurance benefits beginning on day one.
- 401(k) plan with a company match and profit-sharing contribution.
- Four weeks of vacation.
- Short-term incentive compensation eligibility.
- Long-term incentive eligibility.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
