Cloud Security Engineer

UL Solutions • Northbrook, IL

77d • $95,000 - $120,000 • Hybrid

About The Position

We are seeking a highly skilled Cloud Security Engineer with strong Application Security expertise to join our security architecture team. This role will be responsible for designing, implementing, and maintaining secure cloud environments and applications across multi-cloud platforms, with a focus on Azure. The ideal candidate will have hands-on experience with cloud-native security tools, DevSecOps practices, and compliance frameworks such as NIST 800-53, SOC 2, and CIS Controls.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• 3-4 years of experience in cloud security engineering and application security.
• Strong understanding of Azure security services and architecture.
• Experience with infrastructure-as-code (Terraform, Bicep).
• Familiarity with Snowflake security features and data protection strategies.
• Knowledge of identity and access management (Azure AD, Conditional Access, MFA).
• Hands-on experience with DevSecOps tools and practices.

Nice To Haves

• Certifications: Azure Security Engineer Associate, CISSP, CCSP, OSCP, or GIAC.
• Experience with multi-subscription Azure environments.
• Familiarity with Zero Trust architecture and implementation.
• Experience with security automation and orchestration.

Responsibilities

• Design and implement security controls for cloud infrastructure (Azure, AWS, GCP).
• Develop and maintain security architecture patterns (e.g., hub-and-spoke, Zero Trust).
• Integrate security tools such as Wiz, Microsoft Defender for Cloud, Silverfort, and Terraform.
• Conduct threat modeling and risk assessments for cloud-native services.
• Collaborate with IAM, SOC, and GRC teams to align cloud security with enterprise policies.
• Perform secure code reviews, static/dynamic analysis, and vulnerability assessments.
• Integrate security into CI/CD pipelines using tools like Snyk, Checkmarx, or Veracode.
• Guide development teams on secure coding practices and OWASP Top 10.
• Design and implement API security strategies including OAuth2, OpenID Connect, and mTLS.
• Support remediation of application vulnerabilities and provide technical guidance.
• Map cloud and application security controls to compliance frameworks (NIST 800-53, SOC 2, CIS).
• Assist in audits and evidence collection for regulatory compliance.
• Maintain documentation of security architecture, policies, and procedures.

Benefits

• Estimated salary range of $95,000 to $120,000.
• Annual bonus compensation with a target payout of 10% of the base salary.
• Health benefits such as medical, dental, and vision.
• Wellness benefits such as mental and financial health.
• Retirement savings (401K).
• Paid time off including vacation (15 days), holidays (12 days), and sick time off (72 hours).

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees