Cloud Security Engineer

Senior IT Security Specialist (Remote)

Location preference: Windsor, CT; Boston, MA; or Atlanta, GA. Remote work with the expectation to be based near one of these sites.

Job Overview

We are seeking a Senior IT Security Specialist to strengthen our SaaS Security Posture Management (SSPM), Cloud Security Posture Management (CSPM), and container security capabilities across a rapidly evolving hybrid cloud and SaaS ecosystem. The role partners closely with Cloud, DevSecOps, Application Security, and Platform Engineering teams to identify, assess, and remediate security risks across SaaS platforms, public cloud infrastructure, and containerized workloads.

SaaS & Cloud Security Posture Management

• Support and mature SSPM/CSPM initiatives across enterprise SaaS platforms.
• Configure, operate, and tune SSPM/CSPM tools to identify misconfigurations, excessive permissions, and risky integrations.
• Support CSPM capabilities across AWS and Azure, including continuous monitoring and risk prioritization.
• Partner with application owners to drive remediation of SaaS and cloud security findings.

Cloud & Container Security

• Secure cloud-native workloads across AWS and Azure using native and third‐party security controls.
• Support container and Kubernetes security, including image scanning, runtime protections, and policy enforcement.
• Collaborate with DevSecOps teams to embed security controls into CI/CD pipelines.

Automation, IaC & PaC

• Develop and maintain security automation using scripting languages (Python, PowerShell, Bash).
• Implement and review Infrastructure‑as‑Code (Terraform, ARM, CloudFormation) with a security‑first mindset.
• Design and enforce Policy‑as‑Code (OPA, Sentinel, native cloud policies) to prevent insecure deployments.
• Enable shift‑left security by integrating controls early in the development lifecycle.

AI / ML Security (Plus)

• Contribute to emerging AI Security Posture Management (AI‑SPM) efforts.
• Partner with platform and data teams to assess and secure MLOps pipelines, models, and supporting infrastructure.
• Help define guardrails for AI usage, data access, and model governance.

Risk, Governance & Collaboration

• Translate technical findings into actionable risk insights for remediation.
• Support audits, risk assessments, and regulatory inquiries related to cloud and SaaS security.
• Stay current on emerging threats, SaaS attack patterns, cloud security trends, and AI security risks.
• Mentor junior team members and influence secure‑by‑design practices across the organization.

Required Qualifications

• 5+ years of experience in information security, with a strong focus on cloud and SaaS security.
• Hands‑on experience with CSPM in AWS and/or Azure.
• Experience with SSPM tools such as CrowdStrike Falcon Shield, Palo Alto Prisma, or similar platforms.
• Strong understanding of container security and Kubernetes environments.
• Proficiency in scripting and automation (Python, PowerShell, Bash).
• Practical experience with Infrastructure‑as‑Code (IaC) and Policy‑as‑Code (PaC).
• Solid understanding of IAM, identity federation, least‑privilege access, and SaaS permissions models.
• Ability to work cross‑functionally with cloud, DevOps, AppSec, and platform teams.

Preferred / Nice‑to‑Have Qualifications

• Experience securing MLOps pipelines and AI‑enabled platforms.
• Familiarity with AI‑SPM concepts and tooling.
• Experience integrating security into CI/CD pipelines.
• Knowledge of cloud‑native security services (AWS Security Hub, GuardDuty, Azure Defender, etc.).
• Security certifications such as CISSP, CCSP, AWS/Azure Security certifications.

What Success Looks Like

• Improved visibility and risk reduction across Voya’s SaaS and cloud environments.
• Measurable reduction in high‑risk misconfigurations and over‑privileged access.
• Increased automation and policy‑driven enforcement of security controls.
• Strong partnership with engineering teams, enabling security without slowing delivery.
• Forward‑looking contributions to AI and MLOps security strategy.

Compensation Pay Disclosure

Annual base salary range: $114,480 – $130,000. In addition to base salary, Voya offers incentive opportunities based on performance. Compensation is finalized at the time of offer and may vary by location, experience, and skill level.

Benefits

• Health, dental, vision, and life insurance plans
• 401(k) savings plan with company matching up to 6%
• Employer‑paid cash‑balance retirement plan (4%)
• Tuition reimbursement up to $5,250 per year
• Paid time off including 20 vacation days, nine paid company holidays, and a flexible Diversity Celebration Day
• Paid volunteer time: 40 hours per calendar year

Equal Employment Opportunity

Voya Financial is an equal‑opportunity employer. Voya Financial provides equal opportunity to qualified individuals regardless of race, color, sex, national origin, citizenship status, religion, age, disability, veteran status, creed, marital status, sexual orientation, gender identity, genetic information, or any other status protected by state or local law.

Reasonable Accommodations

Voya is committed to the inclusion of all qualified individuals. If reasonable accommodation is needed to participate in the job application or interview process, or to perform essential job functions, please reference resources for applicants with disabilities.