Senior Cloud Security Engineer

Xsolis, Inc

19d

About The Position

Xsolis is seeking a Senior Cloud Security Engineer to lead the design, implementation, and continuous improvement of its cloud security posture. The role focuses on securing AI-driven healthcare platforms running in AWS, supporting compliance with healthcare regulations, and protecting sensitive patient information. It calls for deep technical expertise in cloud security and regulated environments, as well as awareness of security concerns affecting AI/ML, generative AI, and agentic AI systems. The engineer will work across cloud architecture, workforce security, AI/ML security, compliance, detection and response, and DevSecOps. The position also involves mentoring colleagues and collaborating with product, engineering, people operations, enterprise systems, and data science teams. Success requires motivation, communication, organization, prioritization, problem-solving, and adaptability. Work is typically in a normal office administrative environment with minimal exposure to physical risks. The role involves mostly sedentary work, with occasional exertion of up to 10 pounds and brief periods of walking or standing. Travel to Xsolis’s home offices in Tennessee is required for training.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, or Information Systems, or equivalent working experience.
At least 5 years of experience in cloud security or cybersecurity engineering.
Strong knowledge of cloud security principles, including IAM, networking, encryption, and logging.
Hands-on experience using and securing AWS services.
Solid understanding of securing containerized environments, including Kubernetes and Docker.
Deep understanding of security in regulated environments, including HIPAA, HITRUST, and SOC 2.
Broad experience implementing automation to improve efficiency.
Experience implementing Zero Trust Architecture.
Proficiency in programming or scripting.
Experience identifying AI security risks and securing AI technologies.
Ability to work with and indirectly lead a wide range of professionals and team members.
Ability to pass a background check.
Must already be authorized to work in the United States on a full-time, permanent basis without current or future visa sponsorship.

Nice To Haves

Master’s degree in Cybersecurity, Computer Science, or Information Systems.
Certifications such as CISSP, CCSP, or AWS Security certifications.
Familiarity with Python, Java, Node.js, or C#.
Experience with SAST, DAST, SCA, and AI coding tools.

Responsibilities

Design and implement secure cloud architectures across AWS.
Lead development of security guardrails, policies, and standards, including IAM, network segmentation, and encryption.
Implement Zero Trust principles across cloud-native systems and user endpoints.
Secure containerized and serverless workloads, including ECS, Kubernetes, Docker, and Lambda.
Assess cloud implementations, identify security issues, and prioritize remediation.
Define and enforce endpoint and resource-access security controls.
Improve identity lifecycle and privileged access management (PAM).
Partner with engineering teams to design and implement a secure VDI environment for PHI access.
Define and enforce security controls for AI/ML and generative AI applications.
Partner with Data Science to mitigate model poisoning, prompt injection, data leakage, and adversarial attack risks.
Secure agentic AI systems, including autonomous workflows and decision-making agents.
Collaborate with data science teams to embed security into the model development lifecycle (MLSecOps).
Collaborate with GRC on adherence to healthcare regulations, including HIPAA, HITRUST, and SOC 2.
Conduct risk assessments and threat modeling for cloud and AI systems.
Support audits and compliance initiatives with appropriate controls and documentation.
Implement and tune cloud-native security monitoring and detection, including SIEM, CSPM, and CWPP.
Develop automated response and remediation workflows.
Help manage incident response efforts for cloud security events.
Use SAST, DAST, and SCA, including AI coding tools.
Integrate and optimize security in CI/CD pipelines and infrastructure as code, including Terraform and CloudFormation.
Automate security controls, scanning, and policy enforcement; partner with engineering teams to shift security left.
Mentor engineers and security analysts and promote security best practices across teams.
Partner with product, engineering, people operations, enterprise systems, and data science teams.
Stay informed about emerging threats in cloud and AI security and collaborate with internal and external teams to meet business objectives and support Xsolis values.
Travel to Xsolis’s home offices in Tennessee for training.