Consultant, Info Security, App, Data, Cloud Security

Job Purpose and Impact

• The Cloud Security Engineer will contribute to strengthening the security foundation for Cargill's modern cloud-based applications and platforms. In this role, you will apply cybersecurity and cloud security engineering expertise to secure, operate, and scale Infrastructure as a Service (IaaS) and Platform as a Service (PaaS) environments across AWS and Azure.
  
  You will contribute to security design, adopt automation-first approaches, and help ensure security is embedded by design into cloud platforms and engineering workflows. You will also leverage AI-assisted engineering practices to improve cloud security operations, engineering productivity, and delivery efficiency.

Key Accountabilities

• Design, implement, and maintain the security and resiliency of enterprise-grade cloud services in support of Cargill's mission.
• Implement and operate cloud security solutions across AWS and Azure.
• Develop and automate security policies, controls, and workflows using Infrastructure as Code, scripting, cloud-native security services, and AI-assisted engineering capabilities.
• Partner with Enterprise IT, Cloud platforms, DevSecOps, Software Engineering, and Compliance teams to embed security into cloud architectures, CI/CD pipelines, and migration workflows.
• Support cloud security incident investigations, remediation activities, and continuous security improvements.
• Contribute to cloud security engineering standards, reusable automation, documentation, and operational best practices.
• Continuously identify opportunities to improve cloud security engineering and operations through automation and AI-driven capabilities.

Required Qualifications

• • Bachelor's degree in a related field or equivalent practical experience.
  • 4-8 years of experience in cloud engineering and cloud security roles.
  • Strong hands-on experience securing AWS and/or Azure cloud environments.
  • Experience with cloud security services and platforms, including Cloud IAM, Wiz, or equivalent CSPM tools.
  • Strong understanding of AWS networking and security constructs, including security groups, network firewalls, and segmentation.
  • Experience designing and securing container platforms (Kubernetes, EKS, ECS, Docker, etc.).
  • Strong skills in Infrastructure as Code and automation using Terraform and scripting languages such as Python, Golang, or PowerShell.
  • Good understanding of DevOps and CI/CD practices, application resiliency, and security-by-design principles.
  • Ability to analyze cloud security data, metrics, and logs to drive risk reduction and operational improvements.
  • Demonstrated ability to collaborate effectively across engineering teams and contribute to technical solutions.
  
  Preferred Qualifications
  
  • Cloud certifications in AWS, Azure, and/or Google Cloud (Associate, Professional, or Specialty).
  • Cybersecurity certifications such as CISSP, CCSP, GSEC, CEH, or equivalent.
  • Experience supporting cloud migrations or enterprise cloud platforms.
  • Experience using AI-assisted engineering tools (e.g., GitHub Copilot, Amazon Q, ChatGPT Enterprise, Claude, Cursor, etc.) to improve engineering productivity, automation, and software development.
  • Good understanding of AI security concepts, including AI governance, AI workload security, prompt injection, data protection, and secure AI adoption in enterprise environments.
  • Demonstrated ability to contribute technical solutions and collaborate across teams without direct authority.
  
  What Success Looks Like
  
  • Cloud security controls are consistent, automated, and scalable across environments.
  • Security risks are addressed early through design, automation, and AI-assisted engineering practices rather than reactive fixes.
  • Cloud security platforms (e.g., Wiz) provide clear, prioritized, and actionable insights.
  • Engineering teams move faster with confidence due to strong security foundations and reusable automation.
  • AI capabilities are effectively leveraged to improve cloud security engineering, operational efficiency, and security outcomes.