Technical Consultant – Cloud Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist the Security and Compliance Practice in areas such as Delivery, Business Development, and Practice Development.

• Work collaboratively with consultants to fulfill and surpass client expectations through defined engagements.

• Provide support for client engagements, whether onsite or remotely, steering them towards established objectives.

• Identify and address project risks or issues effectively.

• Execute project tasks, generate project materials, and present artifacts during engagements.

• Lead strategy, roadmap, design, and planning workshops for medium to large service projects.

• Establish and manage customer expectations.

• Direct project engagement teams during the delivery of consulting services.

• Oversee objectives, requirements gathering, project tasks, milestones, status updates, dependencies, and timelines.

• Analyze risks and issues, determining suitable approaches to address them.

• Create and finalize project deliverables, while conducting peer reviews of team materials.

• Present deliverables to client executive management.

• Serve as Engagement Lead for customer-facing projects when assigned.

• Contribute to business development through client discovery meetings.

• Represent service offerings during sales processes, including scoping, proposal development, and presentations.

• Assist Principal Consultants in engagement scoping and proposal materials.

• Identify opportunities for collaboration across practices.

• Develop, enhance, and standardize in-practice service offerings.

• Own and/or enable multiple service capabilities.

• Act as a thought leader and evangelist focused on process and technology.

• Provide support and mentorship to colleagues.

⛳️ Requirements

• Expert in information security and/or information security governance or compliance with extensive experience.

• Proven track record in reviewing and implementing secure cloud reference architectures and landing zones.

• Capability to translate risk strategies into cloud-native security controls.

• Strong grasp of multi-cloud governance models, including Infrastructure-as-Code, policy-as-code, tagging standards, and multi-account strategies.

• Over 5 years of hands-on experience using CNAPP tools, specifically Wiz and Prisma Cloud.

• Expertise in integrating Wiz and Prisma Cloud with ServiceNow, CI/CD pipelines, and ticketing/alerting workflows.

• Strong history of deploying and implementing Prisma Cloud.

• More than 5 years of experience working with AWS, Azure, and/or GCP.

• Familiarity with AWS Security Hub, Microsoft Defender for Cloud, and Google Security Command Center.

• Hands-on experience with cloud identity, including IAM, Federation, and RBAC in multi-cloud setups.

• Familiarity with Okta and Entra ID.

• In-depth knowledge of CIS Benchmarks, NIST, FedRAMP, ISO 27001, and GDPR.

• Ability to design and map cloud-specific controls for audit and compliance purposes.

• Experience with SIEM integration, including Splunk, Sentinel, and Chronicle.

• Ability to read, understand, and apply Terraform, Bicep, and CloudFormation.

• Familiarity with OPA, Sentinel, and IaC scanning in CI/CD pipelines.

• Proficient in Python, PowerShell, and Bash scripting.

• Experience with Docker and Kubernetes, focusing on securing workloads at scale.

• Subject matter expertise in at least eight security domains or three security solutions.

• Comprehensive knowledge of current and future IT trends, technologies, and standards.

🏝️ Benefits

• Medical, Dental, and Vision Insurance.

• 401(k) plan.

• Paid company holidays.

• Paid time off.

• Paid parental and caregiver leave.

• Cross-department training and development opportunities.

• Sponsored certifications and credentials for ongoing education.

• Access to a multi-million-dollar technology lab.