Job Description

Tricentis is hiring a Lead Cloud Security Engineer to help transform our cloud security function with AI. This is a hands-on role within Product Security, responsible for defining the cloud security roadmap across AWS, Azure, and GCP, leading architecture decisions, and mentoring a team of engineers. You'll replace manual security workflows with intelligent, AI-powered systems and champion that shift across the engineering organization. The ideal candidate brings 5+ years of cloud security experience, has already applied AI to real security problems, and has a track record of driving organizational change.

Why Tricentis

This isn’t a role where you’ll spend six months getting permission to try something new. We’re actively investing in AI across the security function and looking for the person to lead that charge. If you’ve been the one pushing for AI transformation at your current company and want a place that matches your urgency, let’s talk.

What You’ll Actually Do

• Own the strategy. You’ll define and drive the cloud security roadmap, aligning security initiatives with business objectives and product milestones. When there’s a build-vs-buy decision on an AI security platform, you’ll make the call. When leadership asks where we should invest next, you’ll have the answer, backed by data.

• Lead from the front. You’ll run cross-functional security reviews and architecture discussions with engineering, DevSecOps, and SRE leadership. You’re the escalation point for complex cloud security incidents and the person the organization turns to for hard architectural decisions. You’ll champion security-first thinking through presentations, brown bags, and documentation that actually gets read.

• Architect and build. This is a hands-on leadership role. You’ll design, implement, and continuously improve security controls across all three clouds. That means architecting solutions for WAF, DDoS protection, identity management, and container security for Kubernetes workloads at scale, while pushing every one of those capabilities toward AI-driven detection, response, and self-healing.

• Automate relentlessly. You’ll leverage AI-powered automation to audit and maintain cloud-native security posture, develop and enforce policies-as-code, and build intelligent CI/CD security gates that contextualize findings instead of flooding developers with noise. The goal is security that scales with the platform, not with headcount.

• Grow the team. You’ll mentor cloud security engineers, provide hands-on technical guidance, and foster a culture of continuous learning where AI proficiency is a core skill, not an elective. You’ll help every engineer on the team ask “can AI do this better?” before reaching for a manual approach.

What You Bring

• 5+ years in cloud security with deep, hands-on experience in at least one major cloud platform (AWS, Azure, or GCP)

• Ability to leverage AI tools in security operations: building AI-driven cloud configuration auditing, using LLMs to review Terraform or CloudFormation templates, automating threat detection, or creating intelligent tooling that replaced manual workflows

• Strong foundation in Terraform, Python, Kubernetes security, and IAM

• Working knowledge of prompt engineering, RAG architectures, and agent frameworks

• Track record of leading change: mentoring engineers, running architecture reviews, and serving as the go-to person for the hardest security problems

• Experience pushing an organization to adopt AI, navigating skepticism, and delivering measurable results

• A builder who ships, not a strategist who only decks

• Cloud security certifications or experience across multiple cloud platforms are a plus

Tricentis is proud to be an equal opportunity workplace. Qualified applicants will receive consideration for employment without regard to race, color, ethnicity, gender, religious affiliation, age, sexual orientation, socioeconomic status, or physical and mental disability and other statuses protected by law.

Tricentis is proud to be an equal opportunity workplace. Qualified applicants will receive consideration for employment without regard to race, color, ethnicity, gender, religious affiliation, age, sexual orientation, socioeconomic status, or physical and mental disability and other statuses protected by law.

Global Sanctions Compliance

We comply with all applicable global sanctions and export control laws. Candidates must not be listed on any government restricted party lists (including OFAC SDN List and U.S. Commerce Department restricted lists) and must certify that their employment would not violate any sanctions or export control regulations. Candidates must notify us of any changes to their status during the application process or subsequent employment.