Cloud Security Engineer

Role Overview

UL Solutions is seeking a Cloud Security Engineer (remote across the US, or near a UL office with hybrid presence) to join its Security Architecture team. The role focuses on cloud security engineering with strong application security expertise, with emphasis on Azure and multi-cloud environments.

Responsibilities

Cloud Security Engineering

• Design and implement security controls for cloud infrastructure (Azure, AWS, GCP)
• Develop and maintain security architecture patterns (e.g., hub-and-spoke, Zero Trust)
• Integrate and manage security tooling such as Wiz, Microsoft Defender for Cloud, Silverfort, and Terraform
• Perform threat modeling and risk assessments for cloud-native services
• Collaborate with IAM, SOC, and GRC teams to align cloud security with enterprise policies

Application Security

• Conduct secure code reviews and run static/dynamic analysis and vulnerability assessments
• Integrate security into CI/CD pipelines using tools such as Snyk, Checkmarx, or Veracode
• Coach development teams on secure coding practices and the OWASP Top 10
• Design and implement API security strategies, including OAuth2, OpenID Connect, and mTLS
• Support vulnerability remediation and provide technical guidance

Compliance & Governance

• Map cloud and application security controls to NIST 800-53, SOC 2, and CIS Controls
• Assist with audits and evidence collection
• Maintain documentation of security architecture, policies, and procedures

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or related field
• 3–4 years of experience in cloud security engineering and application security
• Strong understanding of Azure security services and cloud architecture
• Experience with Infrastructure as Code (Terraform, Bicep)
• Familiarity with Snowflake security features and data protection strategies
• Knowledge of IAM (e.g., Azure AD, Conditional Access, MFA)
• Hands-on experience with DevSecOps tools and practices

Preferred Qualifications

• Certifications: Azure Security Engineer Associate, CISSP, CCSP, OSCP, or GIAC
• Experience with multi-subscription Azure environments
• Familiarity with Zero Trust architecture implementation
• Experience with security automation and orchestration

Soft Skills

• Strong analytical and problem-solving skills
• Excellent communication and collaboration
• Ability to work independently and cross-functionally
• Commitment to continuous learning in security trends