Senior Cloud Security Engineer

Accountabilities: As a senior technical contributor, you will lead complex cloud security initiatives, develop scalable protection strategies, and collaborate with teams across the organization to strengthen security practices and reduce exposure to emerging threats. Own complex cloud security initiatives and develop solutions to address identified vulnerabilities and security gaps. Evaluate the potential consequences of security implementations, including their impact on system availability and operational performance. Identify high-priority security improvements and make data-driven recommendations to strengthen the overall security posture and prevent attacks. Develop, maintain, and refine cloud security policies, standards, and best practices across the organization. Design mitigation strategies for policy gaps and adapt security recommendations to evolving threats and industry developments. Build and implement security controls that protect the confidentiality, integrity, and availability of networks, systems, and data. Analyze security metrics, performance indicators, vulnerabilities, and data sources to identify risks and recommend remediation strategies. Define and implement new metrics to address monitoring and measurement gaps, influencing teams to prioritize actions according to risk severity. Identify opportunities to automate security guardrails and contribute to the development of scalable automation solutions. Build, maintain, and continuously improve security services and infrastructure solutions. Assess where additional investment in automation and security capabilities can deliver the greatest risk reduction. Educate internal teams and external partners on cloud security risks, standards, and best practices. Communicate complex technical security concepts clearly to technical and non-technical audiences, including organizational leaders. Prepare and share reports outlining security risks, remediation strategies, and progress in reducing exposure. Collaborate with cross-functional teams to address security challenges and define new technical requirements and capabilities. Mentor colleagues, share technical expertise, and contribute to the continuous development of the security team's collective knowledge. Requirements: The ideal candidate brings extensive experience in cybersecurity and cloud infrastructure, particularly within Microsoft Azure environments, along with strong software development capabilities and the ability to influence technical decisions across teams. At least 5 years of experience working with cloud infrastructure. At least 3 years of experience building and managing infrastructure in Microsoft Azure. At least 1 year of software development experience. At least 7 years of experience in security analysis, security research, cybersecurity, security engineering, or a related field. Equivalent education and experience combinations are also accepted: Associate's degree and at least 6 years of relevant security experience. Bachelor's degree and at least 5 years of relevant security experience. Master's degree and at least 3 years of relevant security experience. Doctorate and at least 1 year of relevant security experience. Equivalent practical experience may also be considered. Preferred qualifications and additional skills: Extensive experience designing and building security solutions, ideally for cloud-based services. Experience developing services using Golang (preferred), Python, Terraform, and/or Ruby. Strong understanding of cloud networking environments and common services used to implement network segmentation. Experience conducting threat modeling and architecture or design reviews to assess security risks associated with new technologies. Ability to produce clear, concise, and high-quality technical documentation. Relevant cloud security or infrastructure certifications, such as: Microsoft Azure AZ-900 or AZ-500. Microsoft SC-100 or SC-500. HashiCorp Terraform Associate. GIAC Cloud Security Essentials (GCLD). GIAC Public Cloud Security (GPCS). GIAC Cloud Security Architecture and Design (GCAD). Other relevant cloud security certifications. Strong analytical and problem-solving skills, with the ability to work autonomously in ambiguous environments. Excellent communication and collaboration skills, including the ability to influence stakeholders through technical expertise. A proactive approach to identifying security improvements and automating complex processes. Ability to balance security requirements with operational needs and developer experience. Benefits: Annual base salary range of $127,800–$339,000, depending on location, experience, knowledge, skills, and qualifications. Eligibility for an annual bonus and stock-based rewards for certain roles, based on individual impact and applicable compensation plans. Additional sales incentives may apply to certain roles, depending on responsibilities and plan terms. Remote-first working environment, with the flexibility to work remotely within the United States. Competitive compensation and benefits package. Learning and professional development opportunities. Opportunities for career growth and continuous skills development. Inclusive and collaborative working environment that values diverse backgrounds and perspectives. Workplace accommodations available throughout the interview process for candidates with disabilities. How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1