Cloud Security Engineer (AI/ML Platforms)

Are you looking to make an impactful difference in your work, yourself, and your community? Why settle for just a job when you can land a career? At ICW Group, we are hiring team members who are ready to use their skills, curiosity, and drive to be part of our  journey as we strive to transform the insurance  carrier space. We're proud to be in business for over 50 years, and its change agents like yourself that will help us continue to deliver our mission to create the best insurance experience possible. Headquartered in San Diego with regional offices located throughout the United States, ICW Group has been named for ten consecutive years as a Top 50 performing P&C organization offering the stability of a large, profitable and growing company combined with a focus on all things people. It's our team members who make us an employer of choice and the vibrant company we are today. We strive to make both our  internal and external communities better everyday! Learn more about why you want to be here! PURPOSE OF THE JOB The purpose of the Cloud Security Engineer III is to design secure architectures and develop cybersecurity approaches and techniques for the security of any cloud or SaaS solution. This position will assist with strategic initiatives for short and long-term plans to identify and reduce the attack surface across cloud, SaaS and on premises applications and systems, which may include support for AI/ML platforms such as data pipelines, model development environments, and model serving infrastructure. This position is responsible for keeping the cloud and/or AI/ML platform infrastructure current, making recommendations, and participating in the implementation and continuous improvement of technologies and services in cloud-based and machine learning environments. The position exists to monitor and defend ICW Group’s technology—which may include cloud platforms, SaaS solutions, and AI/ML systems—against potential threats that jeopardize the financial growth, data integrity, and security goals of the Company. ESSENTIAL DUTIES AND RESPONSIBILITIES Monitors and defends cloud-based information systems against unauthorized access, modifications and/or destruction. Monitors networks and systems for security breaches, using software that detects intrusions and anomalous system behavior and develops strategies to respond to and recover from a security breach.  Leads security incident response, including preparation, detection, analysis, containment, eradication, and recovery. Researches and implements methods to remediate network and application security vulnerabilities. Leads and participates in security controls reporting, compliance audits, monthly and ad-hoc statistics and trends, and risk-focused reports including internal and 3rd party Risk Assessments. Utilizes automated tools to identify, assess, and report security concerns, with emphasis placed on effective communication to stakeholders. Takes an active lead to inform, advise, and partner with business units to help better secure operations. Provides management of cloud security solutions/platforms including access management and data protection, coordination of security services, and support during incident cases. Directs and influences multi-disciplinary teams in implementing and operating Cyber Security controls. Collaborates with internal teams to support implementation of security best practices. Collaborates with application developers and database administrators to deliver creative solutions to difficult cloud technology challenges and business requirements. Leads and runs complex cloud security related projects and resolves security related issues. Resolves complex security projects and issues. Develops a set of security standards to respond to and recover from a security breach focused on cloud , SaaS and/or AI/ML systems. Provides support by proposing solutions, coordinating implementation, and enforcing information systems security policies, standards, and methodologies. Uses advanced technologies including Intrusion Detection & Prevention Systems, Lambda, CloudFront, CloudFormation, AWS Security Hub, S3, Batch, API Gateway, VPC, IAM, KMS, CloudWatch, CloudTrail, SFTP, DynamoDB and Config, etc. Prepares and analyzes system security reports by collecting, analyzing, and summarizing data and trends, systems usage and access patterns, and makes recommendations to improve security. Maintains cloud operational security posture to ensure information system security policies, standards, and procedures are established and followed. Creates and updates technical cloud security standards for assets and software. Provides subject matter expertise on cloud information security architecture and systems engineering to other IT and business teams. Executes security architectures for cloud cloud/hybrid systems. Serves as cloud cyber security technical subject matter expert, trainer and a primary resource for the organization. Provides cloud information security expertise to system development teams throughout the development life cycle process. Partners with internal teams to ensure system design and implementation are consistent with company policies, requirements, and directives. Leads and conducts information security risk assessments including documenting processes, service level agreements and best practices. Develops the overall cloud security design, development, testing, and implementation of security solutions. Recommends compliance strategies that support customer requirements and alignment to company policy. Ensures cloud security quality, adherence to security guidelines/controls, profitability, and information security related metrics for self and assigned projects. Collaborates with key stakeholders on remediation strategies and follows remediation activities through closure. Provides support on Incident Response on security incidents