Beacon Hill Staffing Group - Montpelier, VT
posted 5 days ago
Full-time - Senior
Montpelier, VT
Administrative and Support Services
About the position
The Lead Cloud Security Engineer will spearhead the organization's cloud security initiatives, focusing on securing cloud environments such as Microsoft Azure, AWS, and Google Cloud Platform (GCP). This leadership role involves defining the strategic direction for cloud security, mentoring a team of security professionals, and ensuring robust security measures are implemented across all cloud and on-premises systems.
Responsibilities
- Develop and execute a comprehensive cloud security strategy aligned with organizational goals.
- Lead and mentor a team of cloud security engineers, providing guidance and professional development.
- Serve as the primary point of contact for all cloud security matters.
- Design and oversee the implementation of secure architectures for Azure and GCP environments.
- Establish and enforce security policies, standards, and best practices across cloud platforms.
- Ensure seamless integration of security controls between cloud services and on-premises infrastructure.
- Lead efforts to modernize legacy systems and migrate to secure cloud solutions when appropriate.
- Identify, assess, and prioritize security risks across cloud and on-premises environments.
- Ensure compliance with relevant regulations and standards (e.g., ISO 27001, NIST, PCI DSS, GDPR).
- Coordinate with internal and external auditors during security assessments.
- Develop and oversee incident response plans for cloud environments.
- Lead investigations into security incidents and coordinate remediation efforts.
- Utilize threat intelligence to proactively adjust security measures.
- Champion the integration of security into DevOps practices, promoting a DevSecOps culture.
- Lead the automation of security processes and controls using advanced tools and methodologies.
- Collaborate with executive leadership to communicate security strategies and risks.
- Work with cross-functional teams to ensure security requirements are understood and implemented.
- Represent the organization in security forums and industry events.
- Stay abreast of emerging security technologies, threats, and industry trends.
- Drive innovation by evaluating and implementing new security tools and solutions.
- Be relentless about continual risk reduction through iterative improvement across all facets of hybrid cloud security.
Requirements
- Bachelor's degree in Computer Science, Information Security, or related field; a Master's degree is preferred.
- 8+ years of experience in information security, with at least 5 years focused on cloud security.
- Proven leadership experience managing security teams and projects.
- Demonstrable expert knowledge of Microsoft Azure and Google Cloud Platform (GCP) security services and architectures.
- Extensive experience with on-premises infrastructure security and hybrid environments.
- Strong understanding of security frameworks and regulatory compliance requirements.
- Proficiency in security risk management and mitigation strategies.
Nice-to-haves
- Advanced certifications such as CISSP, CCSP, Azure Solutions Architect Expert, Google Professional Cloud Architect, or equivalent.
- Experience in large-scale cloud migrations and transformation projects.
- Knowledge of Zero Trust security models and their application in cloud environments.
- Familiarity with enterprise security tools and platforms (e.g., CASB, DLP, PAM solutions).
