Senior Cloud Security Engineer

Med-Metrix

Senior Cloud Security Engineer securing AWS/Azure infrastructure and AI/ML workloads for Med-Metrix’s healthcare operations. Building cloud controls, threat detection, compliance automation, and AI security governance.

Posted 8/5/2026full-timeRemote • New Jersey • 🇺🇸 United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing secure cloud architectures across AWS and Azure, with a strong focus on compliance with HIPAA, HITRUST, and PCI DSS standards. Proficient in integrating security throughout the DevSecOps lifecycle and securing AI/ML environments while mentoring teams on best practices.

Highest-signal resume keywords

AWS Security EngineeringMicrosoft Azure SecurityCloud Security ComplianceAI/ML Security PracticesInfrastructure-as-Code

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud Architecture DesignIdentity and Access ManagementNetwork SecurityEncryption TechniquesThreat DetectionScripting with PythonContainer SecurityDevSecOps PracticesSecurity AuditsRisk Assessment

Soft Skills

Interpersonal CommunicationProblem-SolvingDecision-MakingMentoringResults Orientation

Tools & Technologies

AWS GuardDutyMicrosoft Defender for CloudDockerKubernetesMLOps PlatformsCI/CD ToolsSecurity HubIAM Identity CenterSentinelEntra ID

Certifications & Qualifications

CISSPCCSPHCISPPAWS Security SpecialtyAZ-500GCP Professional Cloud Security Engineer

Industry Keywords

HIPAA ComplianceHITRUSTPCI DSSSOC 2NIST CSFAI GovernanceData Privacy RegulationsAdversarial TestingPHI ManagementOpen-Source Contributions

Tech Stack

Tools & technologies

AWSAzureCloudDockerGoogle Cloud PlatformKubernetesPython

About the role

Key responsibilities & impact

Design and implement secure cloud architecture across AWS and Azure, including identity, network security, encryption, and key management
Implement cloud-native logging, monitoring, and threat detection to improve visibility and incident response
Build Infrastructure-as-Code, Policy-as-Code, and automated compliance controls
Implement and enhance CSPM, CWPP, and CNAPP capabilities
Conduct threat modeling, security architecture reviews, and risk assessments for cloud services and applications
Design and secure AI/ML environments, including MLOps pipelines, model security, inference endpoints, and AI governance
Assess and mitigate AI-specific threats, including prompt injection, model poisoning, adversarial attacks, and data leakage
Partner with engineering and data science teams to implement secure-by-design and privacy-preserving controls for regulated data
Develop automated detections, SOAR playbooks, and AI-driven threat hunting capabilities
Lead technical response to cloud and AI security incidents, including forensic analysis and remediation
Design and implement security controls supporting HIPAA, HITRUST, PCI DSS, SOC 2, NIST CSF, and NIST AI RMF requirements
Support technical readiness, evidence collection, and remediation activities for security audits and compliance assessments
Develop and maintain cloud security standards, technical guidance, and AI governance documentation
Support enterprise risk management and vendor security assessments
Integrate security throughout the DevSecOps lifecycle, including application, container, and secrets management
Develop security metrics, communicate technical risks to stakeholders, and recommend continuous security improvements
Mentor junior engineers and champion security best practices across engineering teams
Use, protect, and disclose patients’ protected health information only in accordance with HIPAA standards
Understand and comply with Information Security and HIPAA policies and procedures
Limit viewing of PHI to the absolute minimum necessary to perform assigned duties

Requirements

What you’ll need

High school diploma or equivalent required
6+ years of experience in information security, with at least 4 years focused on cloud security engineering
Deep hands-on expertise in AWS and Microsoft Azure, including AWS GuardDuty, Security Hub, IAM Identity Center, Microsoft Defender for Cloud, Sentinel, and Entra ID
Strong knowledge of IAM, zero trust architecture, network security, encryption, and secrets management in cloud environments
Practical experience securing AI/ML systems or LLM-based applications, or demonstrable working knowledge of OWASP LLM Top 10, MITRE ATLAS, and NIST AI RMF
Proficiency in at least one scripting/programming language, with Python preferred, and infrastructure-as-code tooling
Experience with container and orchestration security, including Docker, Kubernetes, EKS, and AKS
Solid understanding of DevSecOps practices and CI/CD security integration
Hands-on experience supporting HIPAA, HITRUST CSF, PCI DSS, and SOC 2 compliance programs in cloud environments, including audit evidence and control implementation
Proficiency in Microsoft Office Suite
Strong interpersonal skills and ability to communicate well at all levels of the organization
Strong problem-solving and creative skills, with sound judgment and ability to make decisions based on accurate and timely analyses
High level of integrity and dependability, with a strong sense of urgency and results orientation
Excellent written and verbal communication skills required
Travel may be required for training and conferences
Must possess a smartphone or electronic device capable of downloading applications for multifactor authentication and security purposes
Experience with GCP in addition to AWS and Azure
Experience deploying or securing MLOps platforms such as SageMaker, Vertex AI, Azure ML, Databricks, or Kubeflow
Familiarity with AI-driven security platforms and custom detections using ML techniques
Relevant certifications such as CISSP, CCSP, HCISPP, CCSFP, AWS Security Specialty, AZ-500, GCP Professional Cloud Security Engineer, or GIAC certifications
Prior experience in healthcare, health tech, or revenue cycle management environments handling PHI at scale
Experience with red teaming or adversarial testing of AI systems
Knowledge of data privacy regulations for AI training data and model outputs, including HIPAA de-identification standards
Contributions to security communities, open-source tooling, or published research
Ability to perform the stated physical and mental job demands

Benefits

Comp & perks

Travel may be required for training, conferences, etc.
Multifactor authentication and security purposes supported through a smartphone or electronic device capable of downloading applications