Job Description
Key Responsibilities
\n
Lead cloud security strategy and governance across GCP and AWS environments.
\n
Drive IAM, PAM, access governance, and security policy management.
\n
Oversee CSPM, vulnerability management, risk assessments, and remediation.
\n
Lead security monitoring, incident response, threat hunting, and RCA activities.
\n
Embed security into Terraform, IaC, CI/CD pipelines, and DevSecOps practices.
\n
Ensure secure architecture and hardening of cloud, Kubernetes, applications, and networks.
\n
Support compliance and audits for HIPAA, SOC 2, NIST, CIS, and related frameworks.
\n
Mentor security teams and drive automation, security standards, and continuous improvement.
\n
\n
Required Skills & Qualifications
\n
Strong experience leading cloud security initiatives in GCP and AWS.
\n
Expertise in Terraform, IaC, cloud security architecture, and automation.
\n
Deep knowledge of IAM, SCC, Cloud Armor, KMS, GuardDuty, Security Hub, and related services.
\n
Hands-on experience with CSPM, vulnerability management, and risk governance.
\n
Experience with DevSecOps, CI/CD security, container security, and Kubernetes.
\n
Strong background in SIEM, SOAR, threat detection, incident response, and security operations.
\n
Knowledge of HIPAA, NIST, CIS, SOC 2, and other compliance frameworks.
\n
Proven leadership, stakeholder management, mentoring, and executive communication skills.
\n
Preferred certifications: CISSP, CCSP, CISM, Google Professional Cloud Security Engineer, or AWS Security Specialty