Senior Cloud Security Engineer

It All Starts with Our People

As the leader in automotive preventive maintenance, Valvoline has a proven track record of growth. We continue to invest in our people, processes, and technology to strengthen our ability to efficiently deliver Quick, Easy, Trusted service across all our stores – every day. We're not just in the car business; we're in the people business. And we're looking for humble, hungry, and smart people to help us shape the future of mobility. If you're hungry to drive change and seek a dynamic, collaborative environment that fuels both personal and professional growth, you've found your place with us.

Our highest priority is creating a welcoming workplace with team members from a wide variety of diverse backgrounds and experiences.

How You'll Make a Difference

Valvoline has a rewarding opportunity as a Senior Cloud Security Engineer. In this role, you will be responsible for designing, implementing, and maintaining security controls that protect Valvoline’s cloud infrastructure and emerging AI-enabled platforms. This role focuses on securing cloud-native environments, data pipelines, and AI workloads operating within platforms such as AWS and enterprise analytics environments.

The engineer will work closely with cloud engineering, data engineering, DevOps, and security teams to integrate security into cloud infrastructure, AI platforms, and DevSecOps pipelines. This includes implementing identity controls, securing AI service integrations, protecting enterprise data used by AI models, and ensuring appropriate logging, monitoring, and governance across cloud environments.

As the organization expands its use of generative AI and pro-code AI capabilities, this role will help establish foundational security practices for AI-enabled workloads, including secure model access, API security, data protection, and operational visibility.

A strong understanding of cloud security architecture, identity and access management, DevSecOps pipelines, and emerging AI security risks is essential

How You'll Make a Difference

• Cloud Security Architecture – Design and implement security controls across AWS cloud environments including network security, identity management, encryption, and logging. Ensure cloud workloads follow enterprise security architecture standards
• AI Platform Security – Support the secure deployment and operation of AI-enabled platforms and services, including integrations with services such as AWS Bedrock, SageMaker, or enterprise data platforms. Implement controls for model access, data protection, and secure API communication
• Identity & Access Management – Implement and maintain secure identity and access controls for cloud and AI services including role-based access control (RBAC), least privilege policies, and integration with enterprise identity providers
• DevSecOps Integration – Integrate security controls into CI/CD pipelines to ensure infrastructure and AI workloads are deployed securely. Implement automated security validation, secrets management, and vulnerability scanning within development pipelines.
• Cloud Monitoring & Threat Detection – Implement logging, monitoring, and threat detection capabilities across cloud environments
• Data Security & Governance – Ensure enterprise data used by AI and analytics workloads is properly secured through encryption, access controls, and data governance policies.
• Incident Response & Remediation – Support security investigations and remediation efforts related to cloud infrastructure and AI workloads.
• Other duties and responsibilities as determined by Valvoline from time to time in its sole discretion.

What You'll Need to Succeed

• Bachelor’s degree in information systems, engineering, management, or relevant field, or equivalent work experience
• 5+ years of experience in cloud security, infrastructure security, or DevSecOps engineering.
• 3+ years of experience securing cloud environments such as AWS, Azure, or GCP.
• CISSP, CCSP, AWS Security Specialty, or equivalent cloud security certification preferred
• Experience implementing security controls across cloud-native architectures, containerized workloads, and modern CI/CD pipelines.
• Experience supporting security for data platforms, analytics environments, or AI/ML workloads preferred
• Experience implementing identity and access management (IAM), network segmentation, and encryption within cloud platforms
• Strong knowledge of cloud security architecture and best practices across AWS or other major cloud platforms.
• Experience securing cloud-native infrastructure including containers (Docker), Kubernetes, and serverless workloads.
• Experience implementing identity and access management (IAM), least privilege access models, and Zero Trust principles within cloud environments.
• Familiarity with AI/ML platform security considerations including data protection, model access controls, and API security.
• Experience in integrating security controls into CI/CD pipelines and DevSecOps workflows.
• Knowledge of cloud logging, monitoring, and security observability tools.
• Understanding of OWASP Top 10 and OWASP API Security Top 10 risks.
• Strong collaboration and communication skills with the ability to work across cloud engineering, data engineering, and application teams.
• Understanding of emerging AI security risks including prompt injection, model misuse, and sensitive data exposure in AI-enabled applications.
• Must be authorized to work in the U.S. 

We Take Care of the WHOLE You

• Health insurance plans (medical, dental, vision)
• HSA and flexible spending accounts
• 401(k)  
• Incentive opportunity*
• Life insurance
• Short and long-term disability insurance
• Paid vacation and holidays*
• Employee Assistance Program
• Valvoline Instant Oil Change discounts
• Tuition reimbursement*
• Adoption assistance* 

*Terms and conditions apply, and benefits may differ depending on position.

Your Path to Valvoline

Valvoline provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Join us in revolutionizing the automotive aftermarket industry while enjoying competitive benefits, a supportive work culture, and opportunities for advancement. Apply now and become an integral part of our journey at Valvoline.

The Company endeavors to make its recruitment process accessible to any and all users. Reasonable accommodations will be provided upon request to applicants with disabilities to facilitate equal opportunity throughout the recruitment and selection process. Please contact Human Resources at 1.833.VVV.Report or email ECC@valvoline.com to make a request for reasonable accommodation during any aspect of the recruitment and selection process. The contact information is for accommodation requests only; do not use this contact information to inquire about the status of applications.