Key Responsibilities
- Design, implement, and maintain cloud security architectures across public and hybrid cloud environments.
- Develop and manage security controls that protect cloud infrastructure, applications, containers, and enterprise data.
- Lead implementation of Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), Data Security Posture Management (DSPM), SaaS Security Posture Management (SSPM), and related cloud security technologies.
- Develop security automation and remediation workflows to improve operational efficiency and reduce response times.
- Partner with Governance, Risk, and Compliance (GRC), Infrastructure, DevOps, and Engineering teams to ensure cloud solutions meet organizational security standards.
- Evaluate emerging cloud security technologies and recommend improvements that strengthen the organization's overall security posture.
- Define cloud security architecture standards, technical documentation, implementation guides, and operational procedures.
- Build and maintain security monitoring, logging, and alerting capabilities across cloud platforms.
- Implement Zero Trust security principles, identity protection, secure access controls, and least-privilege models.
- Secure containerized workloads, Kubernetes environments, APIs, and cloud-native applications.
- Collaborate with engineering teams to integrate security into cloud deployments and CI/CD pipelines.
- Participate in architecture reviews, threat modeling, and security assessments for new cloud initiatives.
- Develop automation scripts and infrastructure-as-code solutions that improve security operations and compliance.
- Stay current on emerging cloud threats, attack techniques, and evolving security technologies.
Required Qualifications
- 10+ years of Information Security experience, including significant experience supporting enterprise-scale cloud environments.
- 5+ years designing and implementing cloud security solutions in AWS, Azure, or Google Cloud Platform.
- Strong understanding of Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), DSPM, SSPM, and cloud-native security services.
- Experience securing container platforms such as Kubernetes and Docker.
- Knowledge of Zero Trust Architecture, Identity and Access Management (IAM), privileged access, and secure authentication technologies.
- Experience implementing cloud logging, monitoring, SIEM integrations, and threat detection solutions.
- Experience with Infrastructure as Code (Terraform, CloudFormation, or similar) and security automation.
- Ability to design enterprise cloud security architectures aligned with industry frameworks and compliance requirements.
- Strong scripting or automation experience using PowerShell, Python, Bash, or similar languages.
- Excellent communication skills with the ability to collaborate across technical and business teams.
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related discipline preferred. Relevant cloud and security certifications are highly desirable.
Preferred Technical Skills
- AWS, Microsoft Azure, or Google Cloud Platform
- Cloud Security Posture Management (CSPM)
- Cloud Workload Protection Platforms (CWPP)
- Data Security Posture Management (DSPM)
- SaaS Security Posture Management (SSPM)
- Kubernetes & Container Security
- Zero Trust Architecture
- Identity & Access Management (IAM)
- Microsoft Entra ID / Okta
- SIEM & Cloud Logging
- Security Automation & Orchestration
- Infrastructure as Code (Terraform, CloudFormation)
- CI/CD Security
- Threat Detection & Incident Response
- Cloud Compliance & Security Frameworks
Core Competencies
- Strategic problem-solving and analytical thinking
- Strong technical leadership and collaboration skills
- Ability to influence cross-functional teams and drive security initiatives
- Excellent written and verbal communication
- Adaptability in fast-changing cloud environments
- Strong planning, prioritization, and execution skills
- Continuous learning and commitment to cybersecurity best practices
Cloud Security (AWS, Azure, GCP, CSPM, CWPP, DSPM, SSPM)
Identity & Zero Trust (IAM, Entra ID, Okta, SSO, MFA, PAM)
Cloud Security Automation (Terraform, Python, PowerShell, CI/CD Security, Security Orchestration)
