The convenient, cheap and elastic resources are attracting more and more users to migrate their assets (data, computing and software) into the cloud. However, cloud also caused very serious worry about the security of those assets, since the resources are not under the control of the users. By now, the existing security models and frameworks mainly fit for the security of the cloud platforms and are not applicable to protect migrated assets, since the migrated assets are probably attacked by the resources or other users in a security cloud. This paper defines the users’ assets as jobs, studies its security demands and proposes a new security framework – TESDA used to protect the job in the cloud. In TESDA, the security demands of the jobs are pointed out by their owners, and guide five security mechanisms (including trusting, evaluating, scheduling, defending, auditing) to establish security surroundings for the jobs. TESDA accommodates heterogeneous resources, security technologies and security demands, provides proper security to the jobs, and takes the cost into account.