Cloud Security Engineer-1

MSD•Upper Gwynedd Township, PA

1d•$142,400 - $224,100•Hybrid

About The Position

The Associate Director, Product Security Platform Engineering, plays a critical role in integrating security controls across cloud environments, application developer ecosystems, and corporate infrastructure, ensuring scalable, resilient, secure‑by‑design architectures. This leader will partner closely with Cloud, DevOps, Global Technology, IT Risk Management & Security, and global engineering teams to strengthen our security posture across multi‑cloud and hybrid enterprise environments. Key Responsibilities Platform Engineering & Cloud Security Leadership Lead the design, engineering, and scaling of enterprise product security platforms. Ensure cloud‑native security patterns are deeply integrated across AWS, Azure, etc environments. Conduct technology research to evaluate emerging threats, vulnerabilities, and cloud provider risks. Establish and maintain secure architecture standards, configuration baselines, and best practices for cloud and product security platforms. Drive modernization and automation of security workflows with a DevSecOps mindset. Security Architecture, Governance & Strategy Translate enterprise security strategy and policy into actionable architecture, platform capabilities, and engineering implementations. Define security requirements and enable collaborative development of scalable system and service architectures. Collaborate on cloud security governance, data protection strategy, and secure adoption frameworks. Guide platform teams and developers to close gaps in cloud posture, application security, and data protection maturity. Risk Management, Assessments & Compliance Perform Security Assessments using frameworks such as CSA, NIST, PCI, and internal controls. Ensure compliance with enterprise risk standards, policies, regulatory expectations, and audit requirements. Review cloud services and recommend secure implementation patterns with appropriate monitoring and guardrails. Conduct investigative research and analysis of complex security issues, including threat modeling and vulnerability analysis. Technical Engineering & Automation Write code, scripts, and automation to enhance security tooling, dashboards, integrations, and workflows. Develop new tools and technologies for Cloud Security and platform security engineering. Tune and enhance existing Information Security tools, platforms, and detection engines. Cross‑Functional Collaboration & Leadership Serve as a technical leader on cloud and cybersecurity matters for engineering, cloud COE, and DevOps teams. Act as a consultant to product teams to ensure new products and cloud services are deployed securely. Participate in enterprise architecture forums and influence long-term cloud and security architecture direction. Engage non‑technical stakeholders effectively, translating technical risks into business‑aligned decisions. Mentor team members and serve as an escalation point on complex or unusual issues.

Requirements

Bachelor's degree in computer science, Engineering, Information Systems Security, or equivalent professional experience.
8+ years in Information Security, Cybersecurity, or IT roles with increasing complexity and accountability.
Experience integrating security into CI/CD pipelines and cloud environments.
Strong business acumen in risk management, operations, and emerging technology trends.
Accountability
Accountability
Amazon Web Services (AWS)
Application Security
Business Acumen
Business Management
Cloud Computing
Cloud Security
Cybersecurity
Cybersecurity Operations
Data Protection
Delivery of Security Applications
Design Applications
DevOps Coaching
Emerging Technologies
Firewall Security
Influence
Information Security
Information Technology (IT) Risk Management
Investigative Research
Platform as a Service (PaaS)
Security Architecture Design
Security Governance
SLA Management
System Designs

Nice To Haves

Extensive security engineering experience across IaaS, PaaS, and SaaS environments.
Knowledge of data protection for structured and unstructured data using classification‑based controls.
Experience in vulnerability management, configuration assessment, and threat analysis.
Familiarity with adversary tactics, indicators of compromise, and emerging cyber threat research.
Background with automation, patch management, secure configuration, and applying security standards across many platforms.
Experience designing cloud‑native architectures and security patterns for large enterprises.
Strong understanding of networking infrastructure, firewalls, anti-malware, and endpoint security.
Experience building security architectures aligned to enterprise frameworks (NIST CSF, CSA, ISO27001, etc.).

Responsibilities

Platform Engineering & Cloud Security Leadership Lead the design, engineering, and scaling of enterprise product security platforms.
Ensure cloud‑native security patterns are deeply integrated across AWS, Azure, etc environments.
Conduct technology research to evaluate emerging threats, vulnerabilities, and cloud provider risks.
Establish and maintain secure architecture standards, configuration baselines, and best practices for cloud and product security platforms.
Drive modernization and automation of security workflows with a DevSecOps mindset.
Security Architecture, Governance & Strategy Translate enterprise security strategy and policy into actionable architecture, platform capabilities, and engineering implementations.
Define security requirements and enable collaborative development of scalable system and service architectures.
Collaborate on cloud security governance, data protection strategy, and secure adoption frameworks.
Guide platform teams and developers to close gaps in cloud posture, application security, and data protection maturity.
Risk Management, Assessments & Compliance Perform Security Assessments using frameworks such as CSA, NIST, PCI, and internal controls.
Ensure compliance with enterprise risk standards, policies, regulatory expectations, and audit requirements.
Review cloud services and recommend secure implementation patterns with appropriate monitoring and guardrails.
Conduct investigative research and analysis of complex security issues, including threat modeling and vulnerability analysis.
Technical Engineering & Automation Write code, scripts, and automation to enhance security tooling, dashboards, integrations, and workflows.
Develop new tools and technologies for Cloud Security and platform security engineering.
Tune and enhance existing Information Security tools, platforms, and detection engines.
Cross‑Functional Collaboration & Leadership Serve as a technical leader on cloud and cybersecurity matters for engineering, cloud COE, and DevOps teams.
Act as a consultant to product teams to ensure new products and cloud services are deployed securely.
Participate in enterprise architecture forums and influence long-term cloud and security architecture direction.
Engage non‑technical stakeholders effectively, translating technical risks into business‑aligned decisions.
Mentor team members and serve as an escalation point on complex or unusual issues.