The Cloud Security Consultant Specialist plays a critical role in continuously assessing the posture and maturity of cloud security engineering. This includes designing, advocating, and implementing robust security solutions and opportunities across cloud environments.

This role supports the execution of cloud security capabilities aligned with the organization’s strategic vision, enabling informed strategic and operational decisions that address both business and cybersecurity requirements at an enterprise level.

YOUR RESPONSIBILITIES

Develop and manage security rules, configurations, and automation—including API integrations—to enhance the effectiveness, performance, usability, and value of cloud security tools, with a focus on Amazon Web Services (AWS).

Own security outcomes related to applicable cloud platforms in accordance with management directives and organizational policies.

Review, challenge, and escalate exemption requests from global business units and functions regarding mandatory security requirements, ensuring consistent policy enforcement across all cloud platforms.

Actively participate in Architecture, Design, and Cloud Deployment Pattern reviews for global business units and functions, providing feedback to guarantee mandatory security compliance and secure operations of cloud services.

Oversee Cloud Security Assessment reviews using both manual and automated processes.

Collaborate with vendors, clients, and contractors to implement and integrate cloud security solutions as needed.

Liaise with cloud platform engineers, architects, and business stakeholders to drive adherence to mandatory security controls and best practices.

Review and maintain Cloud Security Baseline documentation—particularly for AWS services—to ensure it remains accurate, relevant, and up to date.

Drive continuous improvement initiatives for cloud security and automation processes, reducing variation and ensuring consistent, high-quality code and data.

Support incident management activities, including incident reviews, analysis, data collection, and reporting.

Proactively research emerging threats and vulnerabilities to strengthen cloud threat identification.