Cloud Security Specialist

About the role

The Cloud Security Specialist will protect our multi‑cloud infrastructure, applications, data, and identities. You will work closely with DevOps, SRE, and platform engineering teams to embed security into every layer of our cloud environment.

Key responsibilities

• Act as the subject‑matter expert for cloud security domains such as identity, containers, network security, and data protection.
• Design, implement, and maintain cloud‑native security architectures across AWS and Azure.
• Define and enforce IAM strategies, including least‑privilege roles and automated governance workflows.
• Lead cloud security assessments, threat modeling, and security reviews for new platforms and major releases.
• Build and operate detection and response capabilities using tools like AWS Security Hub and Azure Defender.
• Develop IaC security policies and automated scanning for Terraform, CloudFormation, and ARM/Bicep.
• Design and enforce Kubernetes security controls, including RBAC, network policies, and runtime protection.
• Perform continuous vulnerability management for cloud workloads and managed services.
• Translate technical risk into business impact for leadership and engineering teams.

Required profile

• Bachelor’s degree in Computer Science, Information Security, or equivalent experience.
• 4–8 years of professional experience, with at least 3 years focused on cloud security.
• Relevant certifications such as AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), Microsoft SC‑300 / AZ‑500, or GIAC cloud security certifications.
• Strong communication skills and ability to collaborate with cross‑functional teams.

Required skills

• Deep expertise in AWS and Azure security services.
• IAM design and governance.
• Infrastructure‑as‑Code tools: Terraform, CloudFormation, ARM/Bicep.
• Kubernetes security (EKS, AKS, GKE) and related controls.
• CSPM tools such as Wiz, Orca, Prisma Cloud.
• SIEM/EDR and cloud‑native monitoring solutions.
• Understanding of cloud networking, encryption, secrets management, and container security.