Join our dynamic cloud security team at Deloitte, dedicated to safeguarding organizations against cyber threats. We focus on proactive defense and resilience, integrating security into strategic planning to manage information and technology risks effectively. Explore the world of Cybersecurity with us.

This role is for a highly skilled Cloud Security Posture Management (CSPM) and Cloud Native Application Protection Platform (CNAPP) Specialist. As an L2/L3 resource, you will be instrumental in ensuring the security, compliance, and operational excellence of our cloud environments and applications. Your expertise will be crucial in securing our cloud infrastructure and applications, aligning with industry best practices and company policies.

Design, configure, and manage CSPM solutions, monitoring cloud environments for misconfigurations and vulnerabilities. Lead incident response for cloud security issues and develop policies for resource provisioning and access.

Implement and manage CNAPP tools for securing cloud-native applications, including containerized environments and Kubernetes. Conduct continuous security assessments and implement runtime protection strategies. Collaborate with DevOps teams to integrate security into CI/CD pipelines.

Investigate and respond to cloud security incidents, utilizing CSPM and CNAPP solutions and cloud-native logging tools. Provide detailed incident reports and post-incident analyses.

Collaborate with cross-functional teams and create documentation for cloud security policies and best practices. Provide technical guidance to junior team members.

Stay updated on cloud security trends and evaluate new technologies to enhance our security posture.

A minimum of 5 years of experience in cloud security, with deep expertise in CSPM and CNAPP technologies is essential. Hands-on experience with leading CSPM and CNAPP tools like Wiz, Prisma Cloud, or Check Point, along with a strong understanding of cloud platforms such as AWS, Azure, and GCP, is required.

Proficiency in securing cloud-native technologies like Kubernetes and Docker is necessary. Knowledge of security best practices, compliance standards (e.g., CIS, NIST, SOC 2), and cloud security frameworks is crucial.

Familiarity with scripting and automation tools like Python, Bash, and Terraform for cloud security tasks is expected. Strong problem-solving and analytical skills are key.

Extensive experience in designing, implementing, and managing secure cloud environments at scale, along with proven expertise in incident response, vulnerability management, and cloud security monitoring, is vital. Deep knowledge of advanced cloud security architectures, threat modeling, and risk assessment is required.

Experience with security automation, DevSecOps practices, and cloud security integrations is beneficial. Excellent communication skills and the ability to mentor junior team members are expected.