Join Boston Consulting Group (BCG) as a Senior IT Security Engineer and play a vital role in fortifying our global cloud security defenses. This position focuses on Cloud Security Posture Management (CSPM) and Cloud-Native Application Protection Platform (CNAPP) solutions, requiring hands-on expertise in their implementation, configuration, operation, and ongoing enhancement. You will leverage your technical skills to protect our cloud environments and services, ensuring robust security across the organization.

BCG is a pioneer in business strategy, dedicated to helping clients transform and achieve their greatest opportunities. We combine deep industry knowledge with cutting-edge technology and design to deliver impactful solutions. Our collaborative approach and commitment to fostering growth make us a leader in the consulting world.

As a Senior IT Security Engineer, you will be instrumental in enhancing BCG’s global cloud security capabilities, with a strong emphasis on CSPM and CNAPP solutions. Your role involves hands-on technical contributions to the implementation, configuration, operation, and continuous improvement of these critical security tools.

Key responsibilities include: - Implementing, configuring, operating, and continuously improving CSPM and CNAPP capabilities. - Engineering and maintaining secure solutions using HashiCorp Vault and AWS CloudHSM. - Building and maintaining infrastructure-as-code solutions with Terraform. - Troubleshooting and resolving complex cloud security issues effectively. - Identifying opportunities to enhance security controls, automation, reliability, and operational processes. - Delivering high-quality technical solutions that balance security risks with business objectives. - Collaborating with global teams to integrate and support cloud security solutions across BCG.

To excel in this Senior IT Security Engineer role, you should possess 3-5 years of dedicated experience in cloud security or security engineering. A proven track record of hands-on experience with implementing and operating CSPM and CNAPP capabilities is essential.

Essential qualifications include: - Strong working knowledge of HashiCorp Vault, Terraform, and AWS CloudHSM. - Proven troubleshooting capabilities across AWS, Azure, and GCP cloud environments. - The ability to analyze complex security issues and develop practical, effective solutions. - Experience delivering reliable technical solutions while adeptly managing changing priorities. - Excellent communication and collaboration skills, crucial for effective teamwork across global teams.

This hybrid role requires a commitment to in-person collaboration, typically around 50% of working time, to foster our culture of connection and teamwork.