Senior Security Engineer, Cloud Data Security

Apexon is a digital-first technology services firm specializing in accelerating business transformation and delivering human-centric digital experiences. We have been meeting customers wherever they are in the digital lifecycle and helping them outperform their competition through speed and innovation.Apexon brings together distinct core competencies in AI, analytics, app development, cloud, commerce, CX, data, DevOps, IoT, mobile, quality engineering and UX, and our deep expertise in BFSI, healthcare, and life sciences to help businesses capitalize on the unlimited opportunities digital offers. Our reputation is built on a comprehensive suite of engineering services, a dedication to solving clients toughest technology problems, and a commitment to continuous improvement. Backed by Goldman Sachs Asset Management and Everstone Capital, Apexon now has a global presence of 15 offices (and 10 delivery centers) across four continents.

We enable #HumanFirstDIGITAL

Senior Security Engineer, Cloud Data Security _ Remote

JOB SUMMARY

The position is a part of Global Information Security team and will work closely with other technology and business units to secure data in a highly diverse and regulated corporate environment. Position will be responsible for the planning, design, deployment, and management of data security in Cloud IaaS, PaaS and SaaS environments, including AI-powered applications and enterprise copilots. Enable the organization to store, transmit and process sensitive data in these environments, while implementing and monitoring compliance with data governance policies, data security and data privacy procedures. This role will leverage the Zenity AI security platform to protect enterprise AI applications, agents, and copilots from data leakage, prompt injection, and other AI-specific threats.

CANDIDATE PROFILE

Education and Experience

Required

• Bachelor s degree in Computer Sciences or related field or equivalent experience/certification.
• 7+ years of information technology experience, with 3+ years of experience in information security
• 2+ years experience discovering, cataloging, and protecting sensitive data, including monitoring and preventing data exfiltration.
• 1+ years hands-on experience working with several of these technologies: Data Loss Prevention (DLP), Data Discovery, Cloud Security Access Broker (CASB), Data Rights Management (DRM), SSL certificate and Encryption Keys.
• 1+ years with AI security platforms and tools for securing enterprise AI applications, copilots, and low-code/no-code environments.

Preferred

• Current information security certification, including Certified Information Security Manager (CISM), or Certified Information Systems Security Professional (CISSP)
• Hands-on experience with any CASB and / or DLP product or service highly preferred.
• Experience with Public Cloud environments in data governance or data compliance standards.
• Familiarity with security frameworks and regulatory requirements CSA, NIST, PCI DSS, GDPR, CCPA, etc.
• Working knowledge of common IT technologies such as Windows server, Linux / Unix, Databases, Active Directory / LDAP, end-user devices.
• Familiarity with change management and deployment processes in large organizations.
• Demonstrated experiences identifying and assessing cloud security vulnerabilities and risks
• Proven ability to effectively prioritize and execute tasks, manage competing priorities.
• Excellent communication, analytical and planning skills to manage implementation of data security controls and practices.
• Current information security certification, including Certified Information Security Manager (CISM), or Certified Information Systems Security Professional (CISSP)
• Hands-on experience with any CASB and / or DLP product or service highly preferred.
• Experience with Zenity AI security platform or similar AI application security solutions for monitoring and protecting AI agents, copilots, and GenAI applications.
• Experience with Public Cloud environments in data governance or data compliance standards.
• Familiarity with security frameworks and regulatory requirements CSA, NIST, PCI DSS, GDPR, CCPA, etc.
• Understanding of AI-specific security risks including prompt injection, data leakage through AI systems, and shadow AI governance.
• Working knowledge of common IT technologies such as Windows server, Linux / Unix, Databases, Active Directory / LDAP, end-user devices.
• Familiarity with change management and deployment processes in large organizations.
• Demonstrated experiences identifying and assessing cloud security vulnerabilities and risks, including AI application vulnerabilities.
• Proven ability to effectively prioritize and execute tasks, manage competing priorities.
• Excellent communication, analytical and planning skills to manage implementation of data security controls and practices.

CORE WORK ACTIVITIES

• Running operations for cloud security systems to protect sensitive data on managed networks, including AI-powered applications and enterprise copilots.
• Conducting cloud security analysis of Cloud platforms/environments and AI application ecosystems.
• Performing onboarding of data security services via setup, log processing setup, policy configuration, and agent deployment.
• Deploying and managing the Zenity AI security platform to discover, monitor, and secure enterprise AI applications, copilots, and agents across the organization.
• Configuring Zenity policies to prevent sensitive data exposure through AI systems and enforce data governance in GenAI environments.
• Assisting with configuration and delivery of CASB reports and Zenity AI security dashboards.
• Providing remote technical support for CASB services, Zenity platform, and resolve service-related issues through research and troubleshooting.
• Monitoring AI application behavior using Zenity to detect anomalies, prompt injection attempts, and unauthorized data access.
• Troubleshooting tickets assigned and drive towards positive resolution.
• Troubleshooting system level problems in a multi-vendor, multi-protocol network environment.
• Ensuring technology issues are addressed as per the priority and escalated as necessary.
• Documenting all technical issues, analysis, communication, and resolution.
• Performing issue resolution for cloud security events and incidents, including AI security incidents identified through Zenity.
• Developing and managing Cloud-specific security policies, standards and procedures e.g., CASB tenant management, proxy server management, firewall management, SSL/IPSec, security incident and event management (SIEM), data protection (DLP, encryption), user account management (SSO, SAML), password/key management, and AI application security policies via Zenity.
• Executing on Cloud security engagements during different phases of the lifecycle design, implementation and operations, including AI security architecture reviews.
• Implementation of industry leading practices around cyber risks, Cloud, and AI application security.
• Collaborating with development teams to integrate Zenity security controls into AI application development and deployment pipelines.
• Performing continuous improvement processes for all SOPs and service documentation.
• Technical leadership in the areas of cloud data security and AI application security.

Maintaining Goals

• Submits reports in a timely manner, ensuring delivery deadlines are met.
• Promotes the documenting of project progress accurately.
• Provides input and assistance to other teams regarding projects.

Managing Work, Projects, and Policies

• Manages and implements work and projects as assigned.
• Generates and provides accurate and timely results in the form of reports, presentations, etc.
• Analyzes information and evaluates results to choose the best solution and solve problems.
• Provides timely, accurate, and detailed status reports as requested.

Demonstrating and Applying Discipline Knowledge

• Provides technical expertise and support to persons inside and outside of the department.
• Demonstrates knowledge of job-relevant issues, products, systems, and processes.
• Demonstrates knowledge of function-specific procedures.
• Keeps up-to-date technically and applies new knowledge to job.
• Uses computers and computer systems (including hardware and software) to enter data and/ or process information.

Delivering on the Needs of Key Stakeholders

• Understands and meets the needs of key stakeholders.
• Develops specific goals and plans to prioritize, organize, and accomplish work.
• Determines priorities, schedules, plans and necessary resources to ensure completion of any projects on schedule.
• Collaborates with internal partners and stakeholders to support business/initiative strategies
• Communicates concepts in a clear and persuasive manner that is easy to understand.
• Generates and provides accurate and timely results in the form of reports, presentations, etc.
• Demonstrates an understanding of business priorities

Additional Responsibilities

• Provides information to supervisors and co-workers by telephone, in written form, e-mail, or in person in a timely manner.
• Demonstrates self-confidence, energy and enthusiasm.
• Informs and/or updates leaders on relevant information in a timely manner.
• Manages time effectively and conducts activities in an organized manner.
• Presents ideas, expectations and information in a concise, organized manner.
• Uses problem solving methodology for decision making and follow up.
• Performs other reasonable duties as assigned by manager.

Our Commitment to Diversity & Inclusion:

Did you know that Apexon has been Certified by Great Place To Work , the global authority on workplace culture, in each of the three regions in which it operates: USA (for the fourth time in 2023), India (seven consecutive certifications as of 2023), and the UK.Apexon is committed to being an equal opportunity employer and promoting diversity in the workplace. We take affirmative action to ensure equal employment opportunity for all qualified individuals. Apexon strictly prohibits discrimination and harassment of any kind and provides equal employment opportunities to employees and applicants without regard to gender, race, color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status, or any other applicable characteristics protected by law. You can read about our Job Applicant Privacy policy here Job Applicant Privacy Policy (apexon.com)

Our Commitment to Environment:

Actively contribute to Apexon's commitment to environmental responsibility by following sustainable practices and supporting ESG initiatives.

Our Perks and Benefits:

Our benefits and rewards program has been thoughtfully designed to recognize your skills and contributions, elevate your learning/upskilling experience and provide care and support for you and your loved ones. As an Apexon Associate, you get continuous skill-based development, opportunities for career advancement, and access to comprehensive health and well-being benefits and assistance.

We also offer:

o Health Insurance with Dental & Vision

o 401K Plan

o Life Insurance, STD & LTD

o Paid Vacations & Holidays

o Paid Parental Leave

o FSA Dependent & Limited Purpose care