• Ensure the company’s security policies and standards are tailored for cloud environments
• Translate security and technical policies into requirements, and communicate security risks to different audiences ranging from business leaders to engineers
• Support advancement of Zero Trust cloud security governance processes
• Define security measures, such as secure authentication methods, encryption, access control lists, intrusion detection systems, firewalls, to protect data stored on public clouds against unauthorized access
• Work with architecture, engineering, and application teams to advise on secure design for cloud applications in areas such as data protection, key management, authentication, and authorization and to ensure security is built into all aspects of the cloud
• Provide design-time review and guidance to teams building and deploying new technology on, and integrating with, services provided by public cloud platforms
• Participate in working groups with other subject matter experts to define and review security standards and guidelines
• Research and stay up to date on the latest security threats and trends
• Analyze threats to cloud technologies and design solutions to mitigate those threats
• Develop and execute projects to enhance cloud security measures
• Provide guidance and oversight for the correction of discovered vulnerabilities

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, or related degree, or equivalent years of experience
• 6+ years demonstrated cybersecurity experience
• 4+ years demonstrated public cloud security experience
• Strong understanding of cybersecurity risks, technical control implementation, and at least one industry standard cybersecurity framework (NIST 800-53, NIST CSF, ISO 27001, etc.)
• In-depth knowledge of cloud security architecture, including public, private, and hybrid models
• Experience with a variety of security tools in multiple public cloud platforms, such as AWS, Azure, and Google Cloud Platform
• Experience with containerization technology, such as Docker and Kubernetes
• Experience with one or more scripting languages
• Knowledge of potential risks involved in workload transitions from on-premises to cloud
• Knowledge of Open Security Architecture (OSA), The Well Architected Framework, and Cloud Security Alliance (CSA)

NA