Cloud Application & AI Security Engineer

Position Summary:

Zoetis’ Tech and Digital (ZTD) organization is seeking an experienced Cloud Security professional to support its Cloud Security function. In this role, you will help strengthen and evolve security standards for cloud resources and applications, contribute to key security initiatives, and partner with engineering and business teams to design and implement practical, risk-based security controls.

You will help enhance how Zoetis secures, governs, manages, and monitors its cloud environments, with a primary focus on Microsoft Azure and Amazon Web Services (AWS). The role will also support application security capabilities, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and SaaS Security Posture Management (SSPM).

You will also contribute to AI security by supporting security assessments for new AI initiatives during the intake process and helping ensure appropriate safeguards are considered. Working collaboratively across technical and business teams, you will provide technical guidance and risk-based recommendations throughout the design, implementation, and ongoing support of security solutions.

Position Responsibilities:

• Strengthen and support the security of Zoetis’ Azure and AWS cloud environments through effective, risk-based security practices.
• Apply cloud security standards across architecture, infrastructure, and applications while balancing security requirements with business objectives.
• Support application security and vulnerability management capabilities, including SAST, DAST, and SSPM.
• Promote secure identity and access management practices, including least-privilege access across cloud environments and Microsoft Entra ID.
• Support security assessments for new AI initiatives and help ensure appropriate safeguards are identified and implemented.
• Partner with engineering, architecture, privacy, risk, compliance, and business teams to improve security and support organizational objectives.
• Identify and communicate security risks, recommendations, and technical requirements to both technical and non-technical stakeholders.
• Contribute to cloud security reviews, risk assessments, security standards, threat modeling, and other cross-functional security initiatives.

Education & Experience:

• Bachelor’s degree in Computer Science, Information Systems, Business Administration, or a related field required.
• 5+ years of experience in IT, information security, cybersecurity, or a related field, preferably within a corporate or enterprise environment.
• Relevant professional certifications, such as Microsoft Azure, AWS, or CISSP, are preferred.
• Strong written and verbal communication skills, with the ability to translate technical security concepts for both technical and business audiences.
• Demonstrated ability to build effective working relationships and establish credibility through sound judgment, integrity, and follow-through.
• Strong analytical and problem-solving skills, with the ability to identify security risks, evaluate options, and recommend practical solutions.
• Ability to manage multiple priorities and remain organized in a fast-paced environment.
• Demonstrated initiative and ability to work independently while contributing effectively within a collaborative team.
• Ability to work successfully across technical and business functions within a matrixed organization.
• Strong customer-service orientation with a commitment to responsive, high-quality support.
• Fluency in written and spoken English required.

Technical Skills & Requirements:

• Experience supporting cloud security solutions in Microsoft Azure and/or AWS; experience working across both cloud environments is preferred.
• Working knowledge of Microsoft Entra ID security and administration, including application registrations, enterprise applications, service principals, API permissions, OAuth 2.0/OpenID Connect, admin consent, credential management, access reviews, and least-privilege practices.
• Experience with scripting, automation, or infrastructure-as-code technologies such as Terraform, PowerShell, Python, or Ansible to support secure cloud deployments and operations.
• Familiarity with security tools and practices related to Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlement Management (CIEM), Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Security Information and Event Management (SIEM), and cloud-native security monitoring.
• Experience with DevOps and cloud deployment tools or processes such as Terraform, Ansible, Docker, GitHub Actions, or Azure DevOps.
• Experience contributing to cloud security reviews, threat modeling, risk assessments, security standards, vulnerability management, or cross-functional security initiatives.

…