Public Cloud Security Engineer

Founded in 1999 in Vienna, the Qualysoft Group is a manufacturer-independent IT consulting and services company, which successfully provides support for its international customers with the aim of boosting their competitiveness and economic efficiency through innovative IT solutions.

Its focus is on financial services providers, telecommunications companies, the automotive industry and energy service providers. Over 400 employees in 6 subsidiaries work together to ensure state of the art solutions for our clients.

We are looking for new colleagues in Qualysoft teams for diverse projects providing continuous learning opportunities. Our common goal is to provide honesty, development and a stable background while getting to know the latest technologies. We are waiting for your application for the position below!

The Cloud Security team is responsible for securely enabling cloud technologies at enterprise scale.

They design security requirements for cloud environments and build automation and tooling to protect workloads while simplifying security integration for application teams.

The team:
Works with multiple cloud providers
Implements preventative and corrective security controls
Operates platforms securing the firm’s cloud footprint
Extends enterprise security functions into cloud environments for Security Operations
This role is at the forefront of embedding security solutions early in development (Build-time) and ensuring secure operations during Runtime — with a special focus on AI Services security.

Responsibilities:
• Collaborate with engineering and AI/ML teams to understand pipelines and AI service security needs
• Translate requirements into automated security policies and controls
• Develop and maintain security automation scripts/tools (Python, Go, PowerShell)
• Design, implement, and oversee multi-cloud security solutions (Azure, AWS, GCP) for AI services
• Partner with vendors and internal squads to deploy and test cloud AI security services
• Stay current on cloud security trends, AI developments, vulnerabilities, and emerging threats
• Troubleshoot and resolve issues with security solutions, including root cause analysis
• Develop and deploy controls using native cloud security offerings (AWS SCP, Azure Policy, GCP Org Policies)

Requirements:
• Solid foundational knowledge of Cloud AI Services:
• Azure AI, Azure AI Search, Azure OpenAI, Azure AI Safety Content
• AWS Bedrock, Anthropic on AWS Bedrock
• Google Vertex AI
• Proficiency with cloud-native security & governance tools:
• Azure Policy, AWS SCP & RCP, GCP Constraints
• Experience with Infrastructure-as-Code (IaC) tools such as Terraform
• Working knowledge of Secure SDLC processes
• Familiarity with cloud-based logging and data pipeline architectures
• Proficiency in scripting languages: PowerShell, Python, Bash
• Familiarity with Policy-as-Code frameworks (Rego, OPA Policy Engine)
• Experience with CI/CD pipelines and tools:
• Azure DevOps, GitHub Actions, Jenkins
• Ability to explain complex technical concepts to non-technical stakeholders
• Familiarity with risk control frameworks and regulatory engagement
• Experience working in an Agile environment

Advantages:
• Experience securing AI/ML workloads and data pipelines in cloud environments
• Experience implementing security governance for AI Service usage
• Experience in the financial industry
• Cloud or Cyber Security certifications (e.g., Azure Security Engineer, AWS Security Specialty)

Why we think you will love working here:

With us you count as a person, our doors are always open.
We live the Qualysoft Team Spirit and stand for transparency!

Fresh wind and new ideas are welcome, because standstill is a foreign word at Qualysoft.