Internship Remote Devsecops Engineer Jobs in Connecticut

Voya is seeking aSenior IT Security Specialistto strengthen ourSaaS Security Posture Management (SSPM),Cloud Security Posture Management (CSPM), andcontainer securitycapabilities across a rapidly evolving hybrid cloud and SaaS ecosystem.

This role will partner closely with Cloud,DevSecOps, Application Security, and Platform Engineering teams toidentify, assess, and remediate security risksacross SaaS platforms, public cloud infrastructure, and containerized workloads. The ideal candidate brings strong hands-on experience withcloud-native security controls, automation, Infrastructure-as-Code (IaC), Policy-as-Code (PaC), and modern security tooling.

Experience withCrowdStrike Falcon Shield,Palo AltoPrisma, Cortexor similar platforms is highly desirable. Familiarity withAI Security Posture Management (AI-SPM)andMLOpssecurityis a strong plus as Voya continues to expand its AI-enabled capabilities.

Key Responsibilities

SaaS & Cloud Security Posture Management

• SupportSaaS Security Posture Management (SSPM)initiatives across enterprise SaaS platforms.

• Configure,operate, and tune SSPM/CSPM tools toidentifymisconfigurations, excessive permissions, and risky integrations.

• Support and mature CSPM capabilities acrossAWS and Azure, including continuous monitoring and risk prioritization.

• Partner with application owners to drive remediation of SaaS and cloud security findings.

Cloud & Container Security

• Secure cloud-native workloads across AWS and Azure using native and third-party security controls.

• Supportcontainer and Kubernetes security, including image scanning, runtime protections, and policy enforcement.

• Collaborate withDevSecOpsteams to embed security controls into CI/CD pipelines.

Automation,IaC&PaC

• Develop andmaintainsecurity automationusing scripting languages (Python, PowerShell, Bash).

• Implement and reviewInfrastructure-as-Code (Terraform, ARM, CloudFormation)with a security-first mindset.

• Design and enforcePolicy-as-Code (OPA, Sentinel, native cloud policies)to prevent insecure deployments.

• Enable shift-left security by integrating controls early in thedevelopmentlifecycle.

AI / ML Security (Plus)

• Contribute to emergingAI Security Posture Management (AI-SPM)efforts.

• Partner with platform and data teams to assess and secureMLOpspipelines, models, and supporting infrastructure.

• Help define guardrails for AI usage, data access, and model governance.

Risk, Governance & Collaboration

• Translate technical findings into actionable risk insights forremediation.

• Support audits, risk assessments, and regulatory inquiries related to cloud and SaaS security.

• Stay current on emerging threats, SaaS attack patterns, cloud security trends, and AI security risks.

• Mentor junior team members and influence secure-by-design practices across the organization.

Required Qualifications

• 5+ years of experience ininformation security, withstrongfocus oncloud and SaaS security.

• Hands-on experience withCloud Security Posture Management (CSPM)in AWS and/or Azure.

• Experience withSaaS Security Posture Management (SSPM)tools such as:

• CrowdStrike Falcon Shield

• Palo Alto (SaaS / Prisma-related capabilities)

• or similar platforms

• Strong understanding ofcontainer securityand Kubernetes environments.

• Proficiencyinscripting and automation(Python, PowerShell, Bash).

• Practical experience withInfrastructure-as-Code (IaC)andPolicy-as-Code (PaC).

• Solid understanding of IAM, identity federation, least-privilege access, and SaaS permissions models.

• Ability to work cross-functionally with cloud, DevOps, AppSec, and platform teams.

Preferred / Nice-to-Have Qualifications

• Experience securingMLOpspipelinesand AI-enabled platforms.

• Familiarity withAI Security Posture Management (AI-SPM)concepts and tooling.

• Experience integrating security into CI/CD pipelines.

• Knowledge of cloud-native security services (AWS Security Hub,GuardDuty, Azure Defender, etc.).

• Security certifications such as CISSP, CCSP, AWS/Azure Security certifications.

What Success Looks Like

• Improved visibility and risk reduction across Voya's SaaS and cloud environments.

• Measurable reduction in high-risk misconfigurations and over-privileged access.

• Increased automation and policy-driven enforcement of security controls.

• Strong partnership with engineering teams, enabling security without slowing delivery.

• Forward-looking contributions to AI andMLOpssecurity strategy.

#LI-ND1