Required Skills & Qualifications:

• 8+ years in cloud security (AWS required; Azure/GCP a plus).

• Hands-on experience with AWS SCPs, Security Hub, Config, OPA, SSM, and EventBridge.

• Proficiency in policy-as-code, CSPM tools, and IaC security (Terraform, CloudFormation).

• Strong knowledge of cloud compliance frameworks (CIS, NIST, SOC 2).

• Ability to translate technical risks for non-technical audiences.

Nice-to-Have:

• Experience in financial services or other regulated industries.

• Certifications: AWS Certified Security Specialty, CISSP, CCSP.

• Familiarity with multi-cloud security strategies.

Key Responsibilities:

• Security Controls & Compliance:

  • Design and implement AWS security controls (SCPs, Security Hub, Config, OPA, EventBridge) to enforce best practices.

  • Develop policy-as-code (e.g., Open Policy Agent) and CSPM workflows for automated remediation.

  • Identify and close gaps in cloud security standards (e.g., CIS, NIST, ISO 27001).

• Risk & Vulnerability Management:

  • Proactively assess risks/vulnerabilities across cloud infrastructure (IaC, CI/CD, SaaS).

  • Partner with DevOps and Engineering teams to integrate security into pipelines.

• Testing & Validation:

  • Build and execute security test plans (integration, regression, performance).

  • Analyze results, troubleshoot issues, and quantify security posture improvements.

• Collaboration & Leadership:

  • Drive cloud security projects end-to-end, ensuring on-time delivery.

  • Communicate risks and solutions to stakeholders (engineers to executives).