Cloud Security Specialist

Role Overview

Key Responsibilities

• Serve as a subject matter expert in identity, containers, network security, or data protection.
• Design, implement, and maintain cloud-native security architectures across AWS and Azure.
• Define and enforce IAM strategies, least-privilege roles, and automated governance workflows.
• Lead cloud security assessments and threat modeling for new platforms and major releases.
• Build and operate cloud detection and response capabilities using AWS Security Hub, Azure Defender, and similar tools.
• Develop infrastructure-as-code security policies and automated scanning for Terraform, CloudFormation, and ARM/Bicep.
• Design and enforce Kubernetes controls including RBAC, network policies, and runtime protection.
• Perform continuous vulnerability management for cloud workloads and managed services.
• Translate technical risk into business impact for leadership and engineering teams.

Technical Skills

• Deep expertise in AWS and Azure security services.
• Strong IAM design and governance skills.
• Proficiency with Terraform, CloudFormation, and ARM/Bicep.
• Experience with Kubernetes security across EKS, AKS, or GKE.
• Familiarity with CSPM tools including Wiz, Orca, or Prisma Cloud.
• Knowledge of SIEM, EDR, cloud-native monitoring, cloud networking, encryption, secrets management, and container security.

Qualifications

• A bachelor's degree in Computer Science, Information Security, or equivalent experience.
• 4–8 years of experience, including at least 3 years in a cloud security specialty.
• Ability to collaborate with DevOps, SRE, platform engineering, and application teams.
• Strong communication skills to explain risk and influence stakeholders.
• Relevant certifications may include AWS Certified Security Specialty, CKS, Microsoft SC-300, AZ-500, or GIAC cloud security certifications.