Description

Required
• 5+ years of relevant information security experience (or 3+ years in IT systems administration with 2 years security responsibilities).
• Cloud security experience with GCP or Azure and sound knowledge of Cloud Security framework.
• Expertise in incident response, system monitoring/analysis, and risk assessments aligned with compliance and privacy laws.
• Experience with compliance requirements: HITRUST, PCI, NIST, HIPAA, SOC2.
• Experience across multiple platforms: Windows, Linux/Unix, macOS; networks and endpoints.
• Experience with vulnerability assessment and penetration testing engagements.
• Experience with change management and project management.
• Excellent technical writing and presentation skills; ability to translate technical risk to business impact.
• Experience with Proofpoint email security and threat protection.
• Experience with MS Purview DLP (Data Loss Prevention).

Preferred
• CCSP preferred; other certs: AZ 500, AWS Security Specialty, GCP Professional Cloud Security Engineer.
• Experience securing Azure, AWS, GCP in enterprise/hybrid environments.
• Familiarity with NIST CSF, ISO 27001, CIS Benchmarks, MITRE ATT&CK.
• Automation, scripting experience a plus.

Responsibilities:
Cloud & Enterprise Security (SME)
• Serve as SME on security fundamentals, techniques, and technologies across Azure, AWS, GCP, and on prem environments.
• Guide cloud security architecture: IAM, encryption/key management, network controls, data protection, workload hardening.
• Implement process improvements aligned to security frameworks (NIST CSF/800 53, ISO 27001) and business needs; optimize technology to improve customer experience.

Security Operations & Incident Response
• Implement and monitor controls for unusual and suspicious activity across endpoints, networks, and cloud platforms.
• Perform advanced monitoring, data/log analysis, threat hunting, and forensic investigations; contribute to SOC/IR workflows.
• Plan, contribute to, and participate in incident plan exercises and tabletop scenarios.

Governance, Risk & Compliance (GRC)
• Draft or revise local policies, standards, guidelines, and procedures to supplement enterprise frameworks; identify and remediate gaps based upon NIST standards.
• Interface with internal/external auditors and examiners; maintain vendor management standards, questionnaires, and regulatory documentation (HITRUST, PCI, NIST, HIPAA, SOC2).
• Review contracts and provide security guidance; support project scoping, costing, and cost–benefit analyses.

Stakeholder Engagement & Communication
• Act as a liaison for the security team; clearly communicate business risk as it relates to information security.
• Create technical documentation (reports, white papers, technical notes, implementation/configuration guides).
• Use visual aids to convey complex topics to large, diverse audiences; communicate clearly in high pressure, high visibility situations.

Continuous Improvement
• Recommend new security solutions and improvements that do not impede innovation.
• Stay current with the evolving threat landscape; consistently learn and grow to remain a step ahead of attackers.

Technical Expertise
Cloud Security (Azure, AWS, GCP)
• GCP: IAM, Security Command Center, Cloud Audit Logs, VPC Service Controls, CMEK/KMS, Cloud Armor, Workload Identity; container security (GKE).
• Azure: Defender for Cloud, Microsoft Sentinel, Entra ID (Azure AD), Conditional Access, Key Vault, NSGs/Azure Firewall, storage encryption, Defender for Endpoint integration.
• AWS: IAM roles/policies, Security Hub, GuardDuty, KMS, CloudTrail/CloudWatch, VPC security controls, AWS WAF, Secrets Manager. (experience with AWS is not required)
 

Key Skills

Education

Bachelor's degree