{"id":3377281,"url":"https://alion.io/job/td-synnex-ai-and-cloud-security-engineer-2","title":"AI and Cloud Security Engineer","company":{"id":14275,"name":"TD SYNNEX","domain":"tdsynnex.com","url":"https://alion.io/company/td-synnex","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":77,"open_postings":171,"ghost_share":0,"stale_share":0.936,"repost_share":0,"time_to_fill_p50_days":36,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chennai, India","San José, Costa Rica","Ahmedabad, India","Kolkata, India","Bengaluru, India","Hyderabad, India","Mumbai, India","Pune, India","New Delhi, India","Barcelona, Spain","Kochi, India","India"],"countries":["IN","CR","ES"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"AWS Bedrock","optional":false},{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"Copilot Studio","optional":false},{"name":"Databricks","optional":false},{"name":"GCP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"OWASP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-07-22T00:00:00Z","employer_posted_date":"2026-07-22","last_verified_at":"2026-10-29T05:49:03Z","board_verified":true,"closed_at":null,"days_open":99,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":99},"description":"Overview\nTD SYNNEX (NYSE: SNX) is the world's largest IT distributor, and we are accelerating AI adoption across Azure AI Foundry, AWS Bedrock, Copilot Studio, Databricks, and self-hosted agent environments. Our security philosophy is distinctive: rather than slowing innovation with pre-approval gatekeeping, we operate a runtime-first, default-allow security posture - every AI interaction is intercepted, analyzed, and enforced at the moment of execution. In our architecture, the traditional network perimeter no longer defines the defensive boundary: the AI agent is the perimeter.\nThe AI & Cloud Security team is chartered to make that vision operational. We are seeking senior technical owner of the AI security runtime control plane and detection fabric. You will build and integrate the inline enforcement pipeline (AI gateway → runtime data protection → intent-based enforcement), tune the policies that keep it fast and low-friction, and serve as the final escalation point for the most complex AI and cloud security incidents. You will also help implement and participate in operation of a closed-loop defensive system in which continuous red-team findings automatically improve runtime policies, detection logic, and SOC threat models. You join a team of two AI & Cloud Security Architects and will be the engineering force that turns strategy into operating controls - across a multi-cloud estate (Azure, AWS, GCP).\nThis role involves collaborating with cross-functional teams to ensure the security of AI and cloud environments, AI applications and infrastructure, addressing potential threats, and maintaining compliance with regulatory standards. The ideal candidate will have a strong background in AI technologies and their implementation as well as cloud security, security principles and cybersecurity best practices. The ability to develop automation in both AI and cloud environments with infrastructure as code (IaC) or policy as code principles is required. The engineer will report to AI & Cloud Security leadership and have strong working relationships with IT and application development leadership.\nResponsibilities\nIntegration - build and own the AI runtime control plane. Engineer, deploy and operate the inline enforcement pipeline for AI traffic: an AI gateway chained with runtime data-protection and intent-based enforcement platforms, fronting LLMs, tools, and MCP servers across Azure AI Foundry, AWS Bedrock, GCP Vertex, Copilot Studio, Databricks, and self-hosted environments.\nHarden the gateway layer for resilience: configure buffering and overload management, enforcement timeouts on external-processing filters, layered global/local rate limiting, and prompt-truncation filters to defend against token-exhaustion and \"reasoning overload\" denial-of-service attacks.\n Integrate the wider AI security ecosystem into one coherent system: onboard AI asset-intelligence context (agent inventory, ownership, blast radius) into enforcement decisions; connect model-security and supply-chain telemetry and continuous red-team signals into SIEM correlation and SOC workflows; stream unified AI detections, decision logs, and policy events for forensics and audit.\n Policy tuning - enforce without friction. Author and calibrate runtime policies: prompt-injection and jailbreak prevention, PII detection/redaction and data masking, intent-based filtering, tool-call validation, MCP access control, and agent permission boundaries (including \"lethal trifecta\" prevention for low-code agents). Balance detection versus hard-block modes to minimize false positives, and tune per AI archetype - embedded SaaS copilots, democratized low-code agents, homegrown agentic pipelines, device-based coding agents, and homegrown models.\nOperate the closed loop: translate continuous adversarial-testing findings into runtime policy updates, new detection content, and guardrail tuning, then validate remediation through re-testing - so defenses evolve with attackers rather than remaining static.\n L3 coverage - final escalation for the AI Security toolset. Lead deep investigations of AI-specific attacks (direct/indirect prompt injection, RAG poisoning, memory poisoning, agent hijacking, MCP/tool abuse, model manipulation, AI-driven data exfiltration), perform decision-replay forensics and root-cause analysis, drive automated containment (agent quarantine, permission revocation, kill switch) toward our sub-15-minute containment objectives, and mentor L2 analysts. Troubleshoot any incidents related to policies.\n Evaluate and pilot AI security vendors: run structured proofs-of-concept for runtime defense, AIDR, AI-SPM, AI red-teaming, and model-security platforms, and provide technical recommendations as the stack matures.\nEngineer and operate cloud security controls across Azure, AWS, and GCP - posture policies, detection tuning, and remediation of misconfigurations, excessive entitlements, and workload risks, including the Kubernetes estates (AKS/EKS) hosting the AI gateway layer.\nDesign and maintain secure multi-cloud patterns consistent with company approved architectural blueprint as well as zero-trust agent access: least-privilege identity for humans, service principals, and agents (Entra ID, AWS IAM, GCP IAM, PAM), conditional access for AI platforms, and least-privilege OAuth scopes for agent integrations.\nEmbed security into DevSecOps: Infrastructure-as-Code (Terraform) scanning, container/Kubernetes security, secrets management, CI/CD hardening, and pre-deployment AI security testing gates in Azure DevOps/GitHub Actions.\nSupport cloud workload vulnerability management (VMs, containers, registries, serverless) with risk-based prioritization, and act as escalation point for investigations spanning cloud, identity, endpoint, and AI telemetry.\nCritical Skills\nProven ability to integrate enterprise security platforms into one system: API/connector engineering, log ingestion and normalization, SIEM/SOAR integration, and multi-vendor inline architectures.\nStrong AI/GenAI security depth: LLM and agentic-AI threat models (OWASP LLM Top 10 2025, OWASP Agentic Top 10, MITRE ATLAS), prompt-injection/jailbreak defense, RAG security, AI guardrails and gateways, MCP security, and the AI-SPM/AIDR/AI-red-teaming tooling categories. Hands-on experience with AI security technologies is highly valued; so is experience with open-source AI security tooling.\n Multi-cloud security engineering across Azure, AWS, and GCP: CSPM/CWPP/CNAPP operations, cloud identity and entitlements, Kubernetes and container security, and secure architecture (hub-and-spoke, segmentation, baseline protection).\nProficiency in KQL, PowerShell, and Python for automation, detection engineering, and tooling; DevSecOps and IaC security (Terraform); CI/CD pipeline integration.\nA pragmatic, enablement-first security mindset: comfortable with a default-allow culture where controls must be fast, precise, and low-friction rather than restrictive.\nExcellent English communication - clear runbooks, integration documentation, and the ability to explain trade-offs to architects, engineers, and leadership across a globally distributed team and multiple time zones.\nExcellent communication and collaboration skills\nAbility to work effectively in a fast-paced, dynamic environment.\nExperience\nSignificant hands-on engineering responsibility, including in cloud security (Azure/AWS/GCP) and demonstrable experience securing or operating AI/ML or LLM-based systems (or strongly evidenced, rapidly acquired hands-on AI-security capability).\nProven track record deploying, integrating, and tuning security platforms in complex enterprise environments and serving as an L3 / senior escalation point; experience running vendor proofs-of-concept is a plus.\nExperience operating security tooling in Kubernetes-based environments (AKS/EKS) and integrating open-source components into enterprise stacks is an advantage.\nRelevant certifications strengthen an application (none individually required): CISSP, CCSP, SC-100, AZ-500, AWS Certified Security - Specialty, Google Professional Cloud Security Engineer; AI red-team or AI-security credentials are a plus.\nBachelor's degree in Computer Science, Cybersecurity, Information Systems, or equivalent practical experience.\nWorking conditions\nWilling to work nonstandard business hours for projects, business impact issues and incident response.\nSome travel required.\nFlexible remote work.\nAt Tech Data, a TD SYNNEX Company, our values guide everything we do: Together, We Own It, We Dare to Go, We Grow and Win, and above all, We Do the Right Thing. These principles shape how we work with each other, our partners, and our communities as we drive innovation and create lasting impact.\nWhat’s In It For You?\nElective Benefits: Our programs are tailored to your country to best accommodate your lifestyle.\n Grow Your Career: Accelerate your path to success (and keep up with the future) with formal programs on leadership and professional development, and many more on-demand courses.\nElevate Your Personal Well-Being: Boost your financial, physical, and mental well-being through seminars, events, and our global Life Empowerment Assistance Program.\nDiversity, Equity & Inclusion: It’s not just a phrase to us; valuing every voice is how we succeed. Join us in celebrating our global diversity through inclusive education, meaningful peer-to-peer conversations, and equitable growth and development opportunities.\nMake the Most of our Global Organization: Network with other new co-workers within your first 30 days through our onboarding program.\nConnect with Your Community: Participate in internal, peer-led inclusive communities and activities, including business resource groups, local volunteering events, and more environmental and social initiatives.\nDon’t meet every single requirement? Apply anyway.\nAt Tech Data, a TD SYNNEX Company, we’re proud to be recognized as a great place to work and a leader in the promotion and practice of diversity, equity and inclusion. If you’re excited about working for our company and believe you’re a good fit for this role, we encourage you to apply. You may be exactly the person we’re looking for!\nWe are an equal opportunity employer and committed to building a diverse team that represents and empowers a variety of backgrounds, perspectives, and skills. All qualified applicants will receive consideration for employment based on merit, without regard to race, colour, religion, national origin, gender, gender identity or expression, sexual orientation, protected veteran status, disability, genetics, age, or any other characteristic protected by law. To support our diversity and inclusion efforts, we may ask for voluntary gender disclosure information. This data will be used solely to improve our hiring practices and ensure fair treatment for all candidates.","description_format":"text","description_chars":10881,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Equity","Professional development"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Wholesale","Servers & Data Center Hardware","IT Resellers & VARs"],"lifecycle":[{"event":"open","at":"2026-10-28T03:16:46Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":1,"p_active":0.218,"p_room":0.28,"age_days":99,"expected_fill_days":36,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/td-synnex-ai-and-cloud-security-engineer-2","json_url":"https://alion.io/job/td-synnex-ai-and-cloud-security-engineer-2.json","meta":{"generated_at":"2026-10-29T08:13:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12577,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":14275},"rest":"https://alion.io/mcp/rest/get_company?id=14275"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftd-synnex-ai-and-cloud-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftd-synnex-ai-and-cloud-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftd-synnex-ai-and-cloud-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/td-synnex-ai-and-cloud-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftd-synnex-ai-and-cloud-security-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3377281}},{"tool":"search_jobs","arguments":{"company":"tdsynnex.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3377281},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}