Position - Cloud Security Consultant
Experience & Background
- 810 years of hands-on experience in cybersecurity with at least 5 years focused on cloud security operations.
- Bachelors or Masters degree in Computer Science Information Security Engineering or related discipline.
- Proven experience securing workloads in AWS Azure and/or Google Cloud environments.
Technical Skills
- Strong practical knowledge of cloud-native security services such as:
- AWS Security Hub GuardDuty CloudTrail KMS
- Azure Defender Sentinel Key Vault Microsoft Entra ID
- Google Cloud SCC IAM KMS
- Strong understanding of:
- Cloud networking segmentation routing firewalls WAF IDS/IPS Zero Trust network controls.
- Identity & Access Management (IAM) RBAC least-privilege models and privileged access enforcement.
- Hands-on experience with:
- Cloud configuration reviews and posture management (CSPM)
- Workload protection platforms (CWPP/XDR)
- SIEM-based monitoring and detection logic creation
- Proficiency in scripting (Python PowerShell Bash) for automation reporting and process enhancement.
- Familiarity with DevSecOps concepts and CI/CD security integrations.
- Experience using Infrastructure-as-Code (e.g. Terraform CloudFormation Bicep) for secure deployment and guardrail automation.
Threat & Detection Expertise
- Ability to perform cloud threat modelling and visualize attacker paths.
- Experience in proactive threat hunting using cloud telemetry and MITRE ATT&CK (including cloud matrices).
- Capable of designing detections improving alert fidelity and responding to cloud-based threats in real time.
Operational Responsibilities
- Experience performing:
- Cloud incident response
- Security monitoring and analysis
- Root cause assessments
- Post-incident improvements
- Ability to continuously evaluate risks remediate control gaps and manage configuration hygiene across cloud accounts and subscriptions.
Data Protection & Compliance
- Strong understanding of:
- Encryption tokenization KMS/HSM key rotation policies.
- Data residency and data classification in cloud environments.
- Knowledge of leading global frameworks and compliance standards such as:
- ISO 27001
- NIST CSF
- CSA Cloud Controls Matrix
- PCI DSS
- GDPR (preferred)
Soft Skills & Professional Competencies
- Ability to translate complex technical risks into business-level insights and executive reports.
- Strong communication and collaboration skills able to work with DevOps Engineering SOC and business stakeholders.
- Continuous learning mindset with strong awareness of emerging threats cloud trends and evolving technologies.
Preferred Certifications (not mandatory)
- CCSP
- CCSK
- AWS Certified Security Specialty
- Azure Security Engineer
- GCP Professional Cloud Security Engineer
$$ We are an equal opportunity employer! We promote diversity in all its forms and create an inclusive work environment free from prejudice discrimination and harassment in which all employees feel a sense of belonging. We warmly welcome all applications regardless of gender age race or ethnic origin social and cultural background religion disability and sexual orientation.
$$Arvina Mehta $$ $$ $$$$ Experience:
Contract
Position - Cloud Security ConsultantExperience & Background810 years of hands-on experience in cybersecurity with at least 5 years focused on cloud security operations.Bachelors or Masters degree in Computer Science Information Security Engineering or related discipline.Proven experience securing wo...
Position - Cloud Security Consultant
Experience & Background
- 810 years of hands-on experience in cybersecurity with at least 5 years focused on cloud security operations.
- Bachelors or Masters degree in Computer Science Information Security Engineering or related discipline.
- Proven experience securing workloads in AWS Azure and/or Google Cloud environments.
Technical Skills
- Strong practical knowledge of cloud-native security services such as:
- AWS Security Hub GuardDuty CloudTrail KMS
- Azure Defender Sentinel Key Vault Microsoft Entra ID
- Google Cloud SCC IAM KMS
- Strong understanding of:
- Cloud networking segmentation routing firewalls WAF IDS/IPS Zero Trust network controls.
- Identity & Access Management (IAM) RBAC least-privilege models and privileged access enforcement.
- Hands-on experience with:
- Cloud configuration reviews and posture management (CSPM)
- Workload protection platforms (CWPP/XDR)
- SIEM-based monitoring and detection logic creation
- Proficiency in scripting (Python PowerShell Bash) for automation reporting and process enhancement.
- Familiarity with DevSecOps concepts and CI/CD security integrations.
- Experience using Infrastructure-as-Code (e.g. Terraform CloudFormation Bicep) for secure deployment and guardrail automation.
Threat & Detection Expertise
- Ability to perform cloud threat modelling and visualize attacker paths.
- Experience in proactive threat hunting using cloud telemetry and MITRE ATT&CK (including cloud matrices).
- Capable of designing detections improving alert fidelity and responding to cloud-based threats in real time.
Operational Responsibilities
- Experience performing:
- Cloud incident response
- Security monitoring and analysis
- Root cause assessments
- Post-incident improvements
- Ability to continuously evaluate risks remediate control gaps and manage configuration hygiene across cloud accounts and subscriptions.
Data Protection & Compliance
- Strong understanding of:
- Encryption tokenization KMS/HSM key rotation policies.
- Data residency and data classification in cloud environments.
- Knowledge of leading global frameworks and compliance standards such as:
- ISO 27001
- NIST CSF
- CSA Cloud Controls Matrix
- PCI DSS
- GDPR (preferred)
Soft Skills & Professional Competencies
- Ability to translate complex technical risks into business-level insights and executive reports.
- Strong communication and collaboration skills able to work with DevOps Engineering SOC and business stakeholders.
- Continuous learning mindset with strong awareness of emerging threats cloud trends and evolving technologies.
Preferred Certifications (not mandatory)
- CCSP
- CCSK
- AWS Certified Security Specialty
- Azure Security Engineer
- GCP Professional Cloud Security Engineer
$$ We are an equal opportunity employer! We promote diversity in all its forms and create an inclusive work environment free from prejudice discrimination and harassment in which all employees feel a sense of belonging. We warmly welcome all applications regardless of gender age race or ethnic origin social and cultural background religion disability and sexual orientation.
$$Arvina Mehta $$ $$ $$$$ Experience:
Contract
View more
View less