Cloud Security Lead Offshore position — see original posting for full details.
About the role
Core responsibilities include:
Cloud Security Controls: Design and implement security controls across AWS, Azure environments.
Continuously enhance our cloud security posture management (CSPM) program to identify and remediate risks in configurations and policies.
Ensure SOC 2 cloud security controls are always executed and auditable.
Container & Kubernetes Security: Oversee security for containerized applications and Kubernetes clusters. Establish best practices for container image security, pod security policies, and cluster network segmentation to protect our microservices.
Overall, You must:
Ensure cloud systems and solutions are secure by design and champion a secure guardrails approach—automating security checks and educating teams to build secure systems from the ground up.
Conduct continuous vulnerability and compliance validation to ensure ongoing adherence to security policies and regulations.
Monitor cloud environments for security incidents and ensuring rapid response through automated mechanisms.
Serve as subject matter expert on cloud technologies and security solutions
Perform technical security design, architecture, change and/or configuration audits/reviews on our hosting environments including Azure & AWS, servers, network devices, endpoints, and security technologies deployed (CNAPP, MDM, WAF, DDoS, etc.)
Collaborate with cross-functional teams, including developers, cloud engineers, architects, and operations, to embed security in critical initiatives including API security.
Foster a culture of continuous improvement, innovation, and knowledge sharing across the organization and staying updated on the latest cloud security threats and advancements.
Your profile:
Bachelor’s degree in computer science, Information Security, or related professional experience.
6+ years’ experience in cloud security
3+ years hand-on experience working with containerized environments
Excellent understanding of Azure, AWS, k8s
Experience working with cloud security posture management tooling
Hands-on experience on threat modeling and security architecture reviews.
Hands-on experience of working with compliance requirements and turning them to technical controls: Ability to implement and manage security controls in cloud environments
Knowledge of cloud security best practices and industry standards
Strong analytical and problem-solving skills
Ability to think critically and make data-driven decisions
Excellent documentation skills, including the creation of procedures, process documentation, and user documentation
Certifications: Relevant certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), or AWS Certified S