Description

You will serve as the subject matter expert for cloud and enterprise security, guiding architecture and operations across Azure, AWS, GCP, and on-premises environments.

This role is hybrid.

Responsibilities

• Implement and monitor security controls for endpoints, networks, and cloud platforms, including threat hunting and forensic investigations.
• Guide cloud security architecture decisions regarding IAM, encryption, network controls, and workload hardening.
• Draft and revise security policies, standards, and procedures to align with NIST, ISO 27001, and business needs.
• Interface with internal and external auditors to maintain compliance with HITRUST, PCI, HIPAA, and SOC2 requirements.
• Translate technical risk into business impact through clear technical writing and stakeholder presentations.

Required Skills

• 5+ years of information security experience, or 3+ years in IT systems administration with 2 years of security responsibilities.
• Expertise in incident response, system monitoring, and risk assessments.
• Strong knowledge of cloud security frameworks for GCP or Azure.
• Experience with compliance standards: HITRUST, PCI, NIST, HIPAA, SOC2.
• Proficiency across Windows, Linux/Unix, and macOS platforms.
• Experience with vulnerability assessment and penetration testing engagements.
• Experience with Proofpoint email security and MS Purview DLP.

Preferred Skills

• CCSP certification; AZ 500, AWS Security Specialty, or GCP Professional Cloud Security Engineer certifications.
• Experience securing Azure, AWS, and GCP in enterprise or hybrid environments.
• Familiarity with NIST CSF, ISO 27001, CIS Benchmarks, and MITRE ATT&CK.

Key Skills

Education

Bachelor's degree