Cloud & Container Security Specialist

Job title: Cloud & Container Security Specialist

About the Role As a Cloud/Container Security Specialist on the Attack Surface Management Team, you will partner with Information Security Office, Chief Technology Office, and other Prudential groups to drive cloud security across the global enterprise. You’ll support implementation and operational best practices, own deliverables and project workstreams around cloud security maturity, and triage issues related to configuration, software weaknesses, build/deployment, and processes to protect Prudential’s products and customers.

What You'll Do

• Contribute to the design, development, implementation, and enhancement of Prudential’s cloud and container monitoring and assessment capabilities.
• Triage, prioritize, drive remediation, and validate mitigating controls for cloud and container misconfigurations; drive continuous monitoring against security posture.
• Proactively identify security improvements in the environment, explore industry trends, and drive innovative security solutions; provide SME guidance on remediation, exceptions, and prioritization.
• Provide updates regarding compliance and risk across platforms; share and evolve reporting metrics to leadership.
• Ideate and implement improvements to processes, metrics, and documentation to mature posture; partner with leadership to set direction for the Attack Surface Management program; develop security policies and compliance initiatives.

What We're Looking For

• Demonstrated expertise in cloud and container security.
• Expertise in container technologies (Docker, Kubernetes, EKS/ECS).
• Skilled in aligning compliance posture with risk and threat correlation.
• Familiarity with compliance frameworks and security posture management tools, vulnerability data sources, and industry frameworks (CIS, NIST, SOC2, PCI/DSS, DORA).
• Experience improving cloud compliance posture management processes and risk management for container and cloud environments.
• Ability to collaborate with engineering teams to provide SME knowledge of vulnerabilities and mitigations; consult on mitigations.
• Engineering mindset — systems thinking, creative problem solving, deductive reasoning; effective communication and documentation.

Nice to Have

• Experience with CI/CD and SecDevOps.
• Scripting background (Python, PowerShell, Bash).
• Familiarity with CSPM tools and audit processes/evidence requirements.
• Understanding of threat actors and how they operate; translate standards into policy and controls.
• Knowledge of automation and Agentic AI runtimes is a plus.

Compensation & Benefits

• Salary range: $96,200 - $158,800 USD per year.
• Market-competitive base salaries with yearly bonus potential; Medical, dental, vision, life, and disability insurance; PTO; parental and military leave.
• 401(k) plan with company match (up to 4%); Company-funded pension plan.
• Wellness programs; Work/Life Resources.