Description

Design and operationalize security configuration baselines across enterprise technology platforms. This role translates policy requirements into enforceable, auditable controls within cloud environments.

This role is hybrid.

Responsibilities

• Engineer and maintain security baselines using Infrastructure as Code tools like Terraform.
• Implement preventative controls, drift detection, and exception workflows in cloud security systems.
• Map security controls to industry standards including NIST, CIS, and ISO.
• Collaborate with cross-functional teams to ensure compliance and audit readiness.
• Maintain structured documentation for security configurations and processes.

Required Skills

• 5+ years of experience in cloud security, platform security, or security engineering.
• 3+ years of experience in risk and control management.
• 3-5 years of hands-on experience with Cloud Security Posture Management (CSPM).
• 2-4 years of software development experience, specifically writing Python scripts.
• Strong working knowledge of public cloud platforms, with Azure and/or GCP preferred.
• Experience with policy as code, guardrail frameworks, and Infrastructure as Code.
• Ability to translate policy requirements into enforceable security baselines.

Preferred Skills

• Direct experience implementing drift detection mechanisms.
• Familiarity with multiple industry compliance frameworks beyond NIST, CIS, and ISO.

Key Skills

Education

Any Graduate