Lead Cloud Security Engineer

Position Summary

Key Responsibilities

• Design and govern secure, scalable cloud architectures, security standards, policies, guardrails, and landing zones across multi-cloud environments.
• Own and enhance the Cloud Security Posture Management (CSPM) program, ensuring alignment with NIST, ISO 27001, CIS Benchmarks, SOC 2, PCI-DSS, GDPR, and Cloud Security Alliance frameworks.
• Perform threat modeling, security architecture reviews, risk assessments, and defining remediation strategies.
• Implement and manage cloud security controls including IAM, MFA, PAM, SSO, Zero Trust, CSPM, and Cloud Workload Protection (CWPP).
• Monitor cloud environments for threats, vulnerabilities, and misconfigurations, drive remediation with platform and application teams.
• Investigate and respond to cloud security incidents, support forensic investigations, and integrate cloud logs into SIEM platforms.
• Detect, investigate, and respond to cloud-based security incidents.
• Analyze logs from cloud-native services such as Defender for Cloud, OCI Cloud Guard, AWS CloudTrail, Azure Monitor, and GCP Logging.