{"id":4174659,"url":"https://alion.io/job/acadia-insurance-cloud-security-automation-engineer","title":"Cloud Security & Automation Engineer","company":{"id":1927193,"name":"Acadia Insurance","domain":"acadiainsurance.com","url":"https://alion.io/company/acadiainsurance","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Urbandale, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":107000,"max":198000,"currency":"USD","period":"year","gross":null,"usd_annual":198000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"CloudFormation","optional":false},{"name":"IAM","optional":false},{"name":"Jira","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"Open Policy Agent","optional":false},{"name":"OWASP","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"Wiz","optional":false}],"status":"live","first_seen_at":"2026-11-12T13:16:55Z","employer_posted_date":null,"last_verified_at":"2026-11-12T13:16:55Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"Berkley Technology Services LLC is hiring a Cloud Security & Automation Engineer to improve security across public cloud, hybrid, container, and cloud-native environments. The role owns cloud exposure management capabilities and turns prioritized risks into technical controls, automated workflows, and measurable remediation outcomes, partnering with Vulnerability Management and AI Security teams.\n\nResponsibilities\nCloud exposure management and platform ownership Configure, administer, optimize, and troubleshoot cloud security and exposure management platforms such as Wiz or Prisma Cloud. Manage cloud account and subscription onboarding, connectors, permissions, policies, rules, integrations, dashboards, and platform health across Azure, AWS, and other in-scope cloud services\nCTEM operations and risk prioritization Support the continuous threat exposure management lifecycle by identifying and validating cloud exposures, analyzing attack paths and toxic combinations, prioritizing material risk, coordinating remediation with accountable teams, validating closure, and tracking exceptions. Translate platform findings into a focused, risk-based backlog rather than a high-volume queue of uncontextualized alerts\nSecurity automation and engineering Design and build reusable automation for cloud security operations using Python, PowerShell, REST APIs, JSON/YAML, workflow orchestration, serverless services, and Infrastructure as Code. Automate asset onboarding, policy deployment, enrichment, ticket routing, evidence collection, remediation validation, reporting, and other repeatable engineering tasks\nCloud security architecture and guardrails Define and implement cloud security requirements, reference patterns, preventive guardrails, and detective controls for identity, network, workload, container, Kubernetes, data, secrets, logging, and configuration security. Contribute security requirements to cloud landing zones and platform engineering standards\nCross-functional remediation and enablement Partner with Cloud, DevOps, Vulnerability Management, IAM, infrastructure, and application teams to assign ownership, develop practical remediation patterns, integrate controls into delivery workflows, and improve adoption of secure cloud practices\nAI security partnership Provide cloud security engineering for AI platforms and services, including secure architecture reviews, identity and non-human identity controls, secrets management, data-flow protection, logging and monitoring, exposure analysis, and automation. Help translate emerging AI security requirements into repeatable cloud controls and engineering patterns\nMetrics, governance, and continuous improvement Develop dashboards and operating metrics for cloud coverage, critical exposures, attack paths, remediation aging, exceptions, automation effectiveness, and control adoption. Use metrics to identify systemic issues and recommend improvements to architecture, tooling, and operating processes\nIncident support and technical escalation Provide cloud security expertise during investigations and incidents, including exposure validation, cloud configuration analysis, identity and access review, log analysis, containment support, and corrective-action engineering. Participate in senior escalation or Person in Charge coverage when assigned\nStandards, documentation, and knowledge sharing Create and maintain technical standards, standard operating procedures, runbooks, architecture diagrams, operational playbooks, and control documentation. Share knowledge through design reviews, demonstrations, and hands-on coaching\nTechnical leadership and recruiting Lead technical workstreams, mentor engineers, review designs and automation, and contribute to resume reviews, technical interviews, and practical assessments for cloud security engineering roles\n\nSkills\nBachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering or related discipline\n5 or more years of experience in cloud security engineering, security engineering, DevSecOps, cloud platform engineering, or a related technical security role\nHands-on experience securing and operating production environments in Microsoft Azure and/or Amazon Web Services\nHands-on experience with a CNAPP, CSPM, or cloud exposure management platform such as Wiz or Prisma Cloud, including policy configuration, findings analysis, integrations, reporting, and remediation workflows\nDemonstrated comfort using AI-assisted tools in a professional context; approaches AI as a standard part of modern workflow rather than a specialized or optional capability\nDemonstrated experience prioritizing cloud risk using business context, exploitability, attack paths, asset criticality, identity exposure, network exposure, and data sensitivity\nStrong scripting and automation skills using Python and/or PowerShell, REST APIs, JSON/YAML, source control, and CI/CD practices\nExperience with Infrastructure as Code and policy-as-code technologies such as Terraform, Bicep, ARM templates, CloudFormation, Open Policy Agent, or equivalent controls\nSolid understanding of cloud identity and access management, non-human identities, least privilege, network security, workload and container security, secrets management, encryption, logging, monitoring, and incident response\nAbility to troubleshoot complex technical issues, communicate risk clearly, and drive remediation across teams without relying solely on direct authority\nAbility to produce clear technical documentation, operating metrics, and leadership-ready status or risk updates\nMulti-cloud experience\nExperience designing or operating a formal CTEM program or exposure management operating model\nExperience integrating cloud security platforms with ServiceNow, Azure DevOps, Jira, SIEM/SOAR platforms, messaging platforms, data pipelines, or reporting tools\nExperience securing Kubernetes, containers, serverless services, CI/CD pipelines, software supply chains, and cloud-native application architectures\nFamiliarity with AI/ML security, including AI service architecture, model and data access, agent or workload identities, prompt and data-flow risks, AI security posture management, and governance of AI-enabled services\nWorking knowledge of cloud and security frameworks such as NIST CSF, NIST 800-53, CIS Benchmarks, CSA CCM, MITRE ATT&CK, OWASP, and relevant regulatory or audit requirements\nRelevant certifications such as CCSP, CISSP, CCSK, Microsoft Azure Security Engineer, AWS Certified Security - Specialty, or vendor platform certifications\n\nBenefits\nEligible to participate in annual discretionary bonus\nHealth, dental, vision, life, disability, wellness, paid time off, 401(k) and profit-sharing plans\n\nCompany Overview\nAcadia Insurance specializes in commercial property casualty insurance. Our company began in 1992 insuring businesses in Maine. It was founded in 1992, and is headquartered in Westbrook, Maine, USA, with a workforce of 201-500 employees. Its website is https://www.acadiainsurance.com/.","description_format":"text","description_chars":7034,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Property & Casualty Insurance"],"lifecycle":[{"event":"open","at":"2026-11-12T15:36:55Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":26,"reasons":["seen:0","win:early"],"computed_at":"2026-11-12T18:20:01Z"},"pay":{"stated_usd_annual":198000,"is_top_pay":true},"html_url":"https://alion.io/job/acadia-insurance-cloud-security-automation-engineer","json_url":"https://alion.io/job/acadia-insurance-cloud-security-automation-engineer.json","meta":{"generated_at":"2026-11-12T18:20:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":38524,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1927193},"rest":"https://alion.io/mcp/rest/get_company?id=1927193"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Facadia-insurance-cloud-security-automation-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Facadia-insurance-cloud-security-automation-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Facadia-insurance-cloud-security-automation-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/acadia-insurance-cloud-security-automation-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Facadia-insurance-cloud-security-automation-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4174659}},{"tool":"search_jobs","arguments":{"company":"acadiainsurance.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4174659},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}