Cloud Security Engineer – AWS and AI Platform Security

Job Description

A leading organization is seeking a Cloud Security Engineer to strengthen security across cloud infrastructure, networking, and AI-enabled platforms. This position focuses on designing and implementing security controls that protect cloud-native services, secure network connectivity, and support compliance requirements within highly regulated environments.

The ideal candidate combines expertise in AWS security, cloud networking, and modern security architecture with hands-on experience securing infrastructure that supports data, analytics, and AI workloads.

Responsibilities

• Design, implement, and maintain security controls across AWS cloud environments.
• Develop secure network architectures that protect cloud-native applications, platforms, and AI-related workloads.
• Configure and manage network segmentation, virtual private cloud architectures, firewalls, security groups, and secure connectivity solutions.
• Partner with infrastructure and engineering teams to incorporate security requirements into platform design, deployment processes, and operational workflows.
• Assess, identify, and remediate security risks while continuously improving cloud security posture.
• Develop and automate security controls, compliance validation processes, and incident response workflows.
• Implement security best practices for identity management, access control, and network protection.
• Support vulnerability management efforts, security assessments, and remediation activities.
• Contribute to the security and governance of environments subject to industry compliance requirements.

Required Experience and Skills

• 5–8 years of experience in cloud security, network security, or infrastructure security engineering.
• Deep expertise securing AWS environments and cloud-native networking architectures.
• Strong experience implementing and managing security controls including IAM, VPCs, VPNs, firewalls, load balancers, and Zero Trust principles.
• Experience designing and securing cloud-native infrastructure and modern distributed applications.
• Knowledge of security requirements and controls for AI and machine learning platforms.
• Experience with security automation, Infrastructure as Code, and cloud security monitoring solutions.
• Strong understanding of networking concepts, threat detection, risk mitigation, and cloud security best practices.
• Experience integrating security into engineering and infrastructure delivery processes.
• Strong analytical and troubleshooting skills with a focus on proactive security improvement.
• Experience supporting healthcare or other highly regulated environments is preferred.

FAQ

1. What does a Cloud Security Engineer specializing in AWS and AI platform security do?

A Cloud Security Engineer designs and implements security controls for AWS cloud environments and platforms that support artificial intelligence workloads. The role focuses on identity, network security, data protection, workload security, monitoring, and secure cloud architecture.

2. How is AWS security managed in this role?

The engineer configures and monitors AWS security services, access controls, encryption, network boundaries, logging, and security policies. They also help identify misconfigurations and strengthen cloud environments against unauthorized access and other security risks.

3. What security considerations are specific to AI platforms?

AI platforms require protection for sensitive training data, model artifacts, inference services, APIs, and supporting infrastructure. Security engineers help control access to these assets, protect data throughout its lifecycle, and establish safeguards around AI workloads and integrations.

4. What AWS services are commonly relevant to cloud security engineering?

Depending on the environment, engineers may work with services such as IAM, KMS, CloudTrail, GuardDuty, Security Hub, VPC, WAF, Secrets Manager, and AWS Config. The specific services used depend on the organization’s architecture, security requirements, and AI platform design.

5. How does identity and access management support this position?

Identity and access management ensures users, applications, and services receive only the permissions they require. The engineer may implement least-privilege access, role-based policies, federation, service identities, and credential management to reduce unauthorized access risks.

6. What role does security monitoring play in AWS and AI environments?

Monitoring provides visibility into activity, configuration changes, network behavior, and potential threats. Engineers establish logging, alerting, and detection mechanisms to identify suspicious activity and support timely investigation and incident response.

7. How is sensitive AI and cloud data protected?

Protection typically involves encryption at rest and in transit, controlled access, secrets management, network segmentation, data classification, and secure storage configurations. Security controls are applied across data stores, model assets, APIs, and compute environments.