Cloud Application & AI Security Engineer

Position Summary:

Zoetis’ Tech and Digital (ZTD) organization is seeking an experienced Cloud Security professional to support its Cloud Security function. In this role, you will help strengthen and evolve security standards for cloud resources and applications, contribute to key security initiatives, and partner with engineering and business teams to design and implement practical, risk-based security controls.

You will help enhance how Zoetis secures, governs, manages, and monitors its cloud environments, with a primary focus on Microsoft Azure and Amazon Web Services (AWS). The role will also support application security capabilities, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and SaaS Security Posture Management (SSPM).

You will also contribute to AI security by supporting security assessments for new AI initiatives during the intake process and helping ensure appropriate safeguards are considered. Working collaboratively across technical and business teams, you will provide technical guidance and risk-based recommendations throughout the design, implementation, and ongoing support of security solutions.

Position Responsibilities:

• Strengthen and support the security of Zoetis’ Azure and AWS cloud environments through effective, risk-based security practices.
• Apply cloud security standards across architecture, infrastructure, and applications while balancing security requirements with business objectives.
• Support application security and vulnerability management capabilities, including SAST, DAST, and SSPM.
• Promote secure identity and access management practices, including least-privilege access across cloud environments and Microsoft Entra ID.
• Support security assessments for new AI initiatives and help ensure appropriate safeguards are identified and implemented.
• Partner with engineering, architecture, privacy, risk, compliance, and business teams to improve security and support organizational objectives.
• Identify and communicate security risks, recommendations, and technical requirements to both technical and non-technical stakeholders.
• Contribute to cloud security reviews, risk assessments, security standards, threat modeling, and other cross-functional security initiatives.

Education & Experience:

• Bachelor’s degree in Computer Science, Information Systems, Business Administration, or a related field required.
• 5+ years of experience in IT, information security, cybersecurity, or a related field, preferably within a corporate or enterprise environment.
• Relevant professional certifications, such as Microsoft Azure, AWS, or CISSP, are preferred.
• Strong written and verbal communication skills, with the ability to translate technical security concepts for both technical and business audiences.
• Demonstrated ability to build effective working relationships and establish credibility through sound judgment, integrity, and follow-through.
• Strong analytical and problem-solving skills, with the ability to identify security risks, evaluate options, and recommend practical solutions.
• Ability to manage multiple priorities and remain organized in a fast-paced environment.
• Demonstrated initiative and ability to work independently while contributing effectively within a collaborative team.
• Ability to work successfully across technical and business functions within a matrixed organization.
• Strong customer-service orientation with a commitment to responsive, high-quality support.
• Fluency in written and spoken English required.

Technical Skills & Requirements:

• Experience supporting cloud security solutions in Microsoft Azure and/or AWS; experience working across both cloud environments is preferred.
• Working knowledge of Microsoft Entra ID security and administration, including application registrations, enterprise applications, service principals, API permissions, OAuth 2.0/OpenID Connect, admin consent, credential management, access reviews, and least-privilege practices.
• Experience with scripting, automation, or infrastructure-as-code technologies such as Terraform, PowerShell, Python, or Ansible to support secure cloud deployments and operations.
• Familiarity with security tools and practices related to Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlement Management (CIEM), Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Security Information and Event Management (SIEM), and cloud-native security monitoring.
• Experience with DevOps and cloud deployment tools or processes such as Terraform, Ansible, Docker, GitHub Actions, or Azure DevOps.
• Experience contributing to cloud security reviews, threat modeling, risk assessments, security standards, vulnerability management, or cross-functional security initiatives.
• Familiarity with security considerations for AI, machine learning, or generative AI, including areas such as data protection, access controls, secure integrations, prompt-injection risks, data leakage, logging, monitoring, and third-party AI services.
• Ability to collaborate effectively with engineering, architecture, privacy, risk, and compliance teams and provide clear, practical technical guidance.

Physical Position Requirements:

• Remote position.
• Approximately 5%–10% travel may be required.
  

The U.S. base salary range for this full-time position is $93,000 to $140,000. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the base pay target range for new hire salaries for the position. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training.

This position is also eligible for short-term incentive compensation.

This position is also eligible for long-term incentives.

In addition to compensation, Zoetis offers a comprehensive benefits package that supports the physical, emotional and financial wellbeing of our colleagues and their families including healthcare and insurance benefits beginning on day one, a 401K plan with a match and profit-sharing contribution from Zoetis, and 4 weeks of vacation.

Visit zoetisbenefits.com to learn more.

Full timeRegularColleague

Any unsolicited resumes sent to Zoetis from a third party, such as an Agency recruiter, including unsolicited resumes sent to a Zoetis mailing address, fax machine or email address, directly to Zoetis employees, or to Zoetis resume database will be considered Zoetis property. Zoetis will NOT pay a fee for any placement resulting from the receipt of an unsolicited resume.

Zoetis will consider any candidate for whom an Agency has submitted an unsolicited resume to have been referred by the Agency free of any charges or fees. This includes any Agency that is an approved/engaged vendor but does not have the appropriate approvals to be engaged on a search.

Notice: Zoetis Recruiters will contact candidates via email from an address ending in @zoetis.com and may also initially connect with candidates through LinkedIn, including LinkedIn InMail. Zoetis does not use Gmail, Outlook, Yahoo, or other web-based/generic email domains to communicate about job opportunities, interviews, or offers of employment. If you receive a recruitment-related email message claiming to be from Zoetis that does not come from @zoetis.com, please treat it as suspicious. For your security, do not reply, click links, open attachments, share personal or financial information, or send money in response to unexpected or questionable recruitment communications.

Zoetis is committed to equal opportunity in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, disability or veteran status or any other protected classification. Disabled individuals are given an equal opportunity to use our online application system. We offer reasonable accommodations as an alternative if requested by an individual with a disability. Please contact Zoetis Colleague Services at zoetiscolleagueservices@zoetis.com to request an accommodation. Zoetis also complies with all applicable national, state and local laws governing nondiscrimination in employment as well as employment eligibility verification requirements of the Immigration and Nationality Act. All applicants must possess or obtain authorization to work in the US for Zoetis. Zoetis retains sole and exclusive discretion to pursue sponsorship for the acquisition or maintenance of nonimmigrant status and employment eligibility, considering factors such as availability of qualified US workers. Individuals requiring sponsorship must disclose this fact. Please note that Zoetis seeks information related to job applications from candidates for jobs in the U.S. solely via the following: (1) our company website at www.Zoetis.com/careers site, or (2) via email to/from addresses using only the Zoetis domain of “@zoetis.com”. In addition, Zoetis does not use Google Hangout for any recruitment related activities. Any solicitation or request for information related to job applications with Zoetis via any other means and/or utilizing email addresses with any other domain should be disregarded. In addition, Zoetis will never ask candidates to make any type of personal financial investment related to gaining employment with Zoetis.