Cloud Engineer

AWS Security Engineer (AI & Automation) Services The AWS Security Engineer (AI & Automation) will carry the full scope of the AWS Security Engineer role and additionally lead the design and delivery of AI-driven automation, dashboards, and agentic tooling to accelerate USANA’s cybersecurity operations and upskill the in-house team. The role includes: Security Automation & Orchestration · Design and build security automation and orchestration workflows using AWS-native services (Lambda, EventBridge, Step Functions) and SOAR patterns. · Automate repetitive security operations tasks to reduce manual effort and rework. · Develop and maintain reusable automation components and runbooks. · should have True Foundry experience AI-Driven Dashboards & Reporting · Build dashboards against cybersecurity tool sets – incidents, threat intelligence, and vulnerability data – to give the cyber team actionable, consolidated visibility. · Replace manual, ad-hoc dashboard building with maintainable, automated reporting pipelines. · Iterate on dashboards based on stakeholder feedback and evolving operational needs. Agentic & GenAI Tooling for Security Operations · Design and build AI agents and assistants (using approved enterprise tools such as Claude Enterprise) to support alert triage, summarization, and investigation acceleration. · Enforce strict entitlement and access controls per dataset for any conversational agent querying sensitive cyber data, ensuring least-privilege access aligned with USANA’s data sensitivity requirements. · Validate agent outputs and guardrails before operational use. AIOps & ML-Based Anomaly Detection · Apply AIOps and machine-learning techniques to detect anomalies and surface high-priority signals across security telemetry. · Tune models and detection logic to reduce noise and improve fidelity. Event-Driven Auto-Remediation & Guardrails · Implement event-driven auto-remediation and preventive guardrails for common cloud security misconfigurations and policy violations. · Ensure automated actions operate within approved change-control and safety boundaries. Detection-as-Code & CI/CD Security Automation · Implement detection-as-code practices and embed automated security checks into CI/CD pipelines. · Version-control detections, automations, and guardrails for auditability and repeatability. Security Telemetry Data Pipelines · Build and maintain data pipelines that aggregate security telemetry for analytics, dashboards, and AI workflows. · Ensure data quality, normalization, and access governance across pipeline stages. Team Enablement & Upskilling · Upskill USANA’s cyber team on AI-assisted security tooling, automation practices, and dashboard development. · Document tooling, share best practices, and reduce dependency on manual processes.