Cloud Security Lead

Requisition ID: 4616

Country: United States

US Locations: Cincinnati, Hermitage, Tampa, Nashville, Indianapolis, Kansas City, San Antonio, St. Louis

Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.

Work you'll do

We are seeking a hands on Cloud Security Lead who excels at deep technical analysis, research, and practical execution across cloud platforms. This role is for a technical practitioner who can translate security standards and policies into implementable controls, partner closely with engineering teams, and drive real improvements in cloud security posture across AWS, Azure, and GCP.

The ideal candidate is a strong researcher and problem solver, comfortable working under broad direction, capable of independently driving work to completion, and skilled at clearly communicating complex cloud security concepts to both technical and non technical stakeholders. This role requires a balance of technical depth, collaboration, and clear storytelling to influence security outcomes at scale.

Responsibilities

Conduct in-depth research, assessment, and analysis of security configurations for IaaS, PaaS, and SaaS services across AWS, Azure, and GCP

Design and deploy cloud services in sandbox environments to perform hands-on security assessments and develop practical security configuration guidance for application teams.

Research and interpret Deloitte internal information security standards, translating policy requirements into technical controls, reverse engineering existing controls, and identifying gaps or inconsistencies.

Collaborate closely with engineering and platform teams to validate the technical feasibility and effectiveness of security guardrails.

Build PowerPoint decks to present metrics/facts to leaderships

Present CSPM and CNAPP dashboards to internal stakeholders, clearly explaining cloud security posture, risk drivers, and remediation priorities.