Cloud Security Engineering Specialist

Your future role at a glance

- Location: Remote
- Department: Security
- Schedule: Full Time | Days

#LI-Remote

How you’ll make an impact in this role

- Cloud Security Engineering: Design, implement, and continuously improve security across enterprise multi-cloud environments (Azure, GCP, and OCI) by developing secure landing zones, cloud security architectures, identity controls, Infrastructure as Code (Terraform) guardrails, and Kubernetes/container security capabilities.
- CNAPP & Cloud Risk Management: Engineer and optimize Cloud-Native Application Protection Platform (CNAPP) capabilities. Drive vulnerability prioritization, remediation strategies, configuration drift detection, and continuous compliance across cloud environments.
- Threat Detection & Security Automation: Develop automated security controls, policy enforcement, and remediation workflows to improve cloud visibility, operational efficiency, and secure-by-default deployments.
- AI Security & Governance: Partner with AI Security, AI Engineering, and Cloud Engineering teams to assess AI technologies and workloads, prioritize and mitigate AI-related risks, develop cloud and AI security standards and technical controls, and support the secure AI development lifecycle (AI SDLC).
- Technical Leadership & Security Standards: Develop cloud security standards, perform design reviews and threat modeling, evaluate emerging technologies, and mentor team members through technical guidance, knowledge sharing, and hands-on coaching.

What minimum requirements you’ll need

Education:

- High School diploma equivalency with 2 years of cumulative experience OR Associate's degree/Bachelor's degree OR 4 years of applicable cumulative job specific experience required.

Additional Preferences:

- Cloud Security & CNAPP Technical Expertise: 5+ years of hands-on experience engineering, securing, and operating enterprise cloud environments across Azure, GCP, or OCI—including deep technical expertise in cloud networking, IAM, Kubernetes/containers, Infrastructure as Code (Terraform), CI/CD security, and cloud logging. Requires proven experience deploying and managing leading CNAPP platforms (such as Wiz, Prisma Cloud, Orca, Defender for Cloud, or Upwind); relevant certifications like CCSP or CISSP are preferred.
- AI Workload Security & Governance: Advanced understanding of modern AI security concepts, including the OWASP Top 10 for LLM Applications, AI-specific threat vectors and risks, secure AI SDLC practices, and governance frameworks for enterprise AI workloads.

Benefits that help you thrive

- Comprehensive health coverage: medical, dental, vision, prescription coverage and HSA/FSA options

- Financial security & retirement: employer-matched 403(b), planning and hardship resources, disability and life insurance

- Time to recharge: pro-rated paid time off (PTO) and holidays

- Career growth: Ascension-paid tuition (Vocare), reimbursement, ongoing professional development and online learning

- Emotional well-being: Employee Assistance Program, counseling and peer support, spiritual care and stress management resources

- Family support: parental leave, adoption assistance and family benefits

- Other benefits: optional legal and pet insurance, transportation savings and more

Life at Ascension: Where purpose meets opportunity

Ascension is a leading nonprofit Catholic health system with a culture and associate experience grounded in service, growth, care and connection. We empower our 99,000+ associates to bring their skills and expertise every day to reimagining healthcare, together. Recognized as one of the Best 150+ Places to Work in Healthcare and a Military-Friendly Gold Employer, you'll find an inclusive and supportive environment where your contributions truly matter.

Equal employment opportunity employer

Ascension provides Equal Employment Opportunities (EEO) to all associates and applicants for employment without regard to race, color, religion, sex/gender, sexual orientation, gender identity or expression, pregnancy, childbirth, and related medical conditions, lactation, breastfeeding, national origin, citizenship, age, disability, genetic information, veteran status, marital status, all as defined by applicable law, and any other legally protected status or characteristic in accordance with applicable federal, state and local laws. For further information, view the EEO Know Your Rights (English) poster or EEO Know Your Rights (Spanish) poster.

Fraud prevention notice

Prospective applicants should be vigilant against fraudulent job offers and interview requests. Scammers may use sophisticated tactics to impersonate Ascension employees. To ensure your safety, please remember: Ascension will never ask for payment or to provide banking or financial information as part of the job application or hiring process, our legitimate email communications will always come from an @ascension.org email address; do not trust other domains, and an official offer will only be extended to candidates who have completed a job application through our authorized applicant tracking system.

E-Verify statement

Employer participates in the Electronic Employment Verification Program. Please click here for more information.