Lead Cloud Security Engineer

The client is seeking a Lead Cloud Security Engineer to join its Information Security team and strengthen and mature the organization’s security program. The role is a hands-on senior position responsible for implementing security controls across cloud, infrastructure, identity, endpoint, network, and application environments, while supporting risk management, monitoring, incident response, security architecture, and CISO reporting.

Responsibilities:

• Design, implement, maintain, and continuously improve security controls across cloud, infrastructure, endpoint, network, application, and identity environments
• Assess existing security controls, identify gaps, and develop remediation plans
• Implement and enhance controls across:
• Identity & Access Management (IAM)
• Privileged Access Management (PAM)
• MFA and RBAC
• Microsoft Entra ID / Azure AD
• Endpoint security and EDR/XDR
• Network security
• AWS cloud security
• Vulnerability and patch management
• Security logging and monitoring
• Data protection and encryption
• Application security
• Security configuration and hardening
• Work with infrastructure, cloud, application, and engineering teams to integrate security controls across the technology environment
• Evaluate security technologies and recommend improvements based on security and business requirements
• Implement and maintain security controls within AWS environments
• Support AWS security monitoring and logging, including Amazon CloudWatch and related security capabilities
• Administer and secure enterprise identity environments involving Microsoft Entra ID, Active Directory, IAM, PAM, MFA, and RBAC
• Review cloud architectures and recommend preventive and detective security controls
• Conduct and support vulnerability assessments, vulnerability scanning, configuration reviews, remediation tracking, and security hardening
• Support enterprise endpoint security technologies, including CrowdStrike/Falcon or similar EDR/XDR security products
• Assist with penetration testing activities and remediation of identified findings
• Work with security operations teams to strengthen SIEM, security logging, monitoring, detection, alerting, and response capabilities
• Analyze security events and recommend improvements to preventive and detective security controls
• Work closely with CISO/security leadership to support execution and maturity of the organization's Information Security program
• Conduct security risk and control assessments and identify security/control deficiencies
• Maintain risk registers and track security remediation activities to completion
• Develop security metrics, dashboards, risk reports, and management presentations for CISO and executive stakeholders
• Assist with third-party/vendor security assessments and due diligence
• Work with major Information Security frameworks and standards, including:
• NIST Cybersecurity Framework
• SOC 2
• ISO 27001
• Support continuous control monitoring and evidence collection
• Review new technologies, applications, infrastructure, and cloud architectures from a security perspective
• Identify architectural security risks and recommend appropriate technical or compensating controls
• Participate in security architecture and design reviews
• Define security requirements for new technology projects and implementations
• Promote secure-by-design and security-by-default practices

Requirements:

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related area, or equivalent practical experience
• 7+ years of experience in Information Security, Cybersecurity, Security Engineering, or a related discipline
• Strong hands-on security engineering and security control implementation experience
• Strong experience with IAM, PAM, MFA, RBAC, Microsoft Entra ID/Azure AD, and Active Directory
• Hands-on experience with AWS administration and cloud security
• Experience with vulnerability management and vulnerability assessments
• Knowledge of endpoint security and EDR/XDR technologies such as CrowdStrike Falcon or comparable products
• Experience with SIEM, security logging, monitoring, and incident response
• Understanding of Amazon CloudWatch or similar cloud monitoring/logging technologies
• Experience with NIST CSF, SOC 2, security risk assessments, control assessments, and audit support
• Strong knowledge of Windows Server, Active Directory, Group Policy, Microsoft 365, and SaaS administration
• Knowledge of network security, data protection, encryption, application security, and threat mitigation
• Experience with scripting/automation using PowerShell, Python, Bash, or similar scripting languages
• Experience with virtualization technologies such as VMware and Hyper-V
• Experience working within a CISO-led Information Security organization
• Experience with GRC tools and security governance programs
• Experience with AWS, Azure, or GCP security
• Experience with SIEM, EDR/XDR, IAM/PAM, vulnerability management, DLP, and security monitoring tools
• Security architecture and secure cloud/infrastructure design experience
• Experience developing executive-level security metrics and CISO reporting
• Third-party/vendor security risk management experience
• Experience supporting SOC 2 and/or ISO 27001 audits and certification initiatives
• Experience developing Information Security policies, standards, procedures, and control frameworks