cloud security consultant

Amazon Web Services

<div><h2 class="jobSectionHeader"><b>DESCRIPTION</b></h2><p>
The Amazon Web Services Professional Services (AWS ProServe) team is seeking a skilled Senior Delivery Consultant to join our Cloud Security team. As a Senior Security Consultant, you&rsquo;ll work closely with customers to design, implement, and automate solutions in AWS to protect customer assets, enable customer security teams to operate more effectively, and ensure customers don&rsquo;t accept unnecessary risk.<br>
<br>
You will work in fast-paced, complex projects that focus on delivering transformative business and security outcomes for customers globally. The ideal candidate is a highly skilled technical security professional with the ability to coach and guide executive security and cloud leaders in their journey, addressing topics such as security strategy and optimizing cloud security operations while being able to dive deep into AWS security technology. Along the way, you&rsquo;ll be expected to invent, extend, and adapt technology to tailor solutions to customer needs as well as coach and mentor junior consultants to enable their success.<br>
<br>
The AWS Professional Services organization is a global team of experts that help customers realize their desired business outcomes when using the AWS Cloud. We work together with customer teams and the AWS Partner Network (APN) to execute enterprise cloud computing initiatives. Our team provides assistance through a collection of offerings which help customers achieve specific outcomes related to enterprise cloud adoption. We also deliver focused guidance through our global specialty practices, which cover a variety of solutions, technologies, and industries.<br>
<br>
Key job responsibilities<br>
As an experienced technology professional, you will be expected to:<br>
1. Act as the technical leader for customer engagements and/or the security workstreams of engagements, leading teams of consultants.<br>
2. Lead internal initiatives to deliver quantifiable impact<br>
3. Develop strategic relationships with internal and external leaders<br>
4. Design and implement complex, scalable, and secure AWS solutions tailored to customer needs<br>
5. Enable and engage delivery partners in project delivery<br>
6. Provide mentorship and coaching to develop others<br>
<br>
A day in the life<br>
You'll work with colleagues and customers to design, develop and implement security solutions that solve real-world problems. You'll have full access to all of AWS's Infrastructure and Agentic-AI tools. You'll spend your days innovating, building and deploying industry-leading technology.
<br>
<br>
About the team<br>
ABOUT AWS:<br>
<br>
Diverse Experiences
<br>
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.
<br>
<br>
Why AWS
<br>
Amazon Web Services (AWS) is the world&rsquo;s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating &mdash; that&rsquo;s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.<br>
<br>
Work/Life Balance
<br>
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve in the cloud.<br>
<br>
Inclusive Team Culture
<br>
AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.<br>
<br>
Mentorship and Career Growth<br>
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.</p><h2 class="jobSectionHeader"><b>
BASIC QUALIFICATIONS</b></h2><ul><li>5+ years of cloud architecture and solution implementation experience</li><li>5+ years of external or internal customer facing, complex and large scale project management experience</li><li>Bachelor's degree in computer science, engineering, mathematics or equivalent</li><li>3+ years of security, compliance and risk management experience</li><li>5+ years of integration, testing and automation experience</li></ul><h2 class="jobSectionHeader"><b>
PREFERRED QUALIFICATIONS</b></h2><ul><li>Knowledge of AWS services including compute, storage, networking, security, databases, machine learning, and serverless technologies</li><li>degree in advanced technology, or AWS Professional level certification</li><li>Knowledge of security and compliance standards including HIPAA and GDPR</li><li>Experience communicating technical concepts to diverse audiences in pre-sales environments</li><li>Experience scripting for automation (e.g., Python, Perl, Ruby)</li><li>Experience in the financial services industry</li><li>Hands-on technical expertise in building security capabilities in code, deploying infrastructure as code, and implementing enterprise security solutions (e.g. WAF, IPS, Anti-DDOS, SIEM)</li></ul><br>
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.<br>
<br>
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.<p><br>
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.</p><br>
USA, NJ, Jersey City - 169,000.00 - 228,600.00 USD annually<br>
USA, NY, New York - 169,000.00 - 228,600.00 USD annually</div><p></p>

Senior Security Consultant, Global Proserve Security

Amazon Web Services (AWS)

<div>
 <strong>
  Description
  <br/>
  <br/>
 </strong>
 The Security Assurance Services (SAS) team, a part of Amazon Web Services, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world&rsquo;s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers.
 <br/>
 <br/>
 The AWS Security Assurance Services team works with our largest enterprise customers to operationalize the shared responsibility model as they migrate to the cloud. Are you a Governance, Risk, and Compliance leader who can address the challenges of migrating systems and workloads to the cloud? Are you skilled at helping executives address their enterprise risk management requirements using highly scalable computing architectures?
 <br/>
 <br/>
 The AWS Security Assurance Service team is seeking a talented Senior Assurance Consultant to help the expansion of the Security Assurance practice and educate our customers on how our product-led, people-powered services helps operate their business securely on AWS while also demonstrating assurance that compliance objectives can be achieved. This is an exciting opportunity to contribute at the intersection of cloud, cyber security, and compliance. You will have the opportunity to work with multiple lines of business, and learn from (and contribute to) a variety of security and compliance use cases. This is a customer facing role where success is measured by helping enable our customers in moving their workloads and regulated data into the cloud by addressing specific risk, regulatory, and compliance requirements.
 <br/>
 <br/>
 We are looking for an innovative security/compliance professional who has the ability to handle a wide range of compliance requirements, is willing to dive in to the details, can translate those requirements into scalable solutions, and is able to communicate at all levels within an organization.
 <br/>
 <br/>
 Key job responsibilities
 <br/>
 <br/>
 Expertise &ndash; Leads teams that include Amazonians, partners, and customers to enhance security assurance and compliance programs
 <br/>
 <br/>
 Solutions - Lead a team to define innovative compliance and risk management approaches to customers that help the customer understand how to move sensitive workloads onto the cloud faster.
 <br/>
 <br/>
 Delivery &ndash; Engagements will require working to resolve security assurance questions and to understand how to manage risk and achieve compliance while operating in the AWS Cloud through deep dive discussions, strategic presentations/recommendations, and hands on demonstrations of automating compliance in the AWS environment.
 <br/>
 <br/>
 Insights - Lead efforts with AWS engineering, support and business teams to convey partner and customer feedback as input to AWS technology roadmaps.
 <br/>
 <br/>
 Ability to travel to customer sites as needed.
 <br/>
 <br/>
 <strong>
  About The Team
  <br/>
  <br/>
 </strong>
 AWS Security Assurance Services LLC, a PCI-QSAC (Payment Card Industry-Qualified Security Assessor company) and HITRUST External Assessor Firm, is a team of industry certified assessors, helping our customers achieve, maintain, and automate compliance in the cloud by tying together applicable audit standards to AWS service specific features and functionality.
 <br/>
 <br/>
 Diverse Experiences
 <br/>
 <br/>
 Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.
 <br/>
 <br/>
 Why AWS
 <br/>
 <br/>
 Amazon Web Services (AWS) is the world&rsquo;s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating &mdash; that&rsquo;s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.
 <br/>
 <br/>
 Work/Life Balance
 <br/>
 <br/>
 We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve in the cloud.
 <br/>
 <br/>
 Inclusive Team Culture
 <br/>
 <br/>
 Here at AWS, it&rsquo;s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon conferences, inspire us to never stop embracing our uniqueness.
 <br/>
 <br/>
 Mentorship and Career Growth
 <br/>
 <br/>
 We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.
 <br/>
 <br/>
 Hybrid Work
 <br/>
 <br/>
 We value innovation and recognize this sometimes requires uninterrupted time to focus on a build. We also value in-person collaboration and time spent face-to-face. Our team affords employees options to work in the office every day or in a flexible, hybrid work model near one of our Amazon offices.
 <br/>
 <br/>
 <strong>
  Basic Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   5+ years in IT security, compliance and risk management, data privacy, or security controls.
  </li>
  <li>
   3+ years experience advising customers on architectures meeting industry standards and regulations such as NIST 800-53 and GDPR.
  </li>
  <li>
   3+ years experience with enterprise risk management methods and techniques to drive successful outcomes in a global enterprise environment.
  </li>
  <li>
   3+ years experience assessing security posture and producing evidence of control effectiveness in cloud environments.
  </li>
  <li>
   Bachelor's Degree in Computer Science, Information Systems Management, Information Security or equivalent experience required.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   CPA, CMA, CISA, CIA or equivalent risk, audit, or compliance credentials
  </li>
  <li>
   Experience in performing security assessments and information system audits of network, operating systems, application security, as well as auditing IT processes.
  </li>
  <li>
   Clear understanding of Agile, CI/CD, DevOps approach and how they impact risk management and compliance.
  </li>
  <li>
   Technical security certification such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).
  </li>
  <li>
   Demonstrated ability to think strategically about business, product, and technical challenges.
  </li>
  <li>
   Master's Degree in Computer Science, Information Systems Management, Information Security or equivalent experience.
   <br/>
   <br/>
  </li>
 </ul>
 Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.
 <br/>
 <br/>
 <br/>
 <strong>
  Company
 </strong>
 - Amazon Web Services EMEA Dubai FZ Branch
 <br/>
 <br/>
 Job ID: A10383756
</div>


Senior Assurance Consultant, AWS Security Assurance Services

Customers Bank

<p></p><div><p>At Customers Bank, we believe in working hard, working smart, working together to deliver memorable customer experiences and having fun. Our vision, mission, and values guide us along our path to achieve excellence. Passion, attitude, creativity, integrity, alignment, and execution are cornerstones of our behaviors. They define who we are as an organization and as individuals. Everyone is encouraged to have personal development plans. By doing so, our team members are on their way to achieve their highest potential and be successful in their personal and professional lives.</p><p></p><p>
Must be legally eligible to work in the United States without sponsorship, now or in the future, to be considered.</p><p></p><p><b>
Who is Customers Bank?</b></p><p>
Founded in 2009, Customers Bank is a super-community bank with over $22 billion in assets. We believe in dedicated personal service for the businesses, professionals, individuals, and families we work with.</p><p></p><p><b>
We get you further, faster.
</b></p><p><b>Focused on you: </b>We provide every customer with a single point of contact. A dedicated team member who&rsquo;s committed to meeting your needs today and tomorrow.</p><p><b>
On the leading edge:</b> We&rsquo;re innovating with the latest tools and technology so we can react to market conditions quicker and help you get ahead.</p><p><b>
Proven reliability:</b> We always ground our innovation in our deep experience and strong financial foundation, so we&rsquo;re a partner you can trust.</p><p></p><p><b>
What You&rsquo;ll Do</b></p><p>
We are seeking an experienced and motivated Cloud Security Specialist is accountable for evaluating the Bank&rsquo;s cloud security posture, cloud environment (Azure and Office) and overall security. They are responsible for implementing proactive security initiatives in the Bank&rsquo;s cloud and email environments and the discovery of sensitive data and ensuring DLP strategies are deployed.</p><p>
This position requires the candidate to have knowledge in configuring and implementation of different Azure and Microsoft Defender (CASB) tools/solutions.</p><p></p><p><b>
Key Responsibilities:</b></p><p></p><ul><li>
Develop, implement, and maintain cloud security strategies, policies, and standards across the organization.</li><li>
Integrate security best practices into multi-cloud and hybrid environments (e.g., AWS, Azure, GCP).</li><li>
Monitor cloud environments for security threats, vulnerabilities, and breaches.</li><li>
Respond to security incidents by identifying root causes, mitigating risks, and coordinating corrective measures.</li><li>
Collaborate with the Incident Response team to analyze cloud-specific threats and resolve issues promptly.</li><li>
Conduct risk assessments for cloud platforms and services to identify and mitigate potential security threats.</li><li>
Ensure compliance with industry standards, regulations, and frameworks (e.g., ISO 27001, SOC 2, NIST, CIS benchmarks).</li><li>
Provide security guidance to ensure adherence to organizational security policies.</li><li>
Implement least privilege principles and ensure secure authentication and authorization mechanisms.</li><li>
Assist in securing cloud infrastructure services, including storage, compute, containers, and networks.</li><li>
Assist in supporting cloud security log monitoring architecture, design and implementation activities</li><li>
Develop and deploy automated security solutions for continuous monitoring, threat detection, and configuration management.</li><li>
Perform regular audits to ensure effective use of security tools and technologies.</li><li>
Implement remediations and proactive measures to address vulnerabilities and misconfigurations.</li><li>
Collaborate with cross-functional teams (e.g., DevOps, IT, compliance) to embed security into cloud projects and initiatives.</li><li>
Educate staff and stakeholders on cloud security risks, technologies, and best practices.</li><li>
Document cloud security policies, processes, and incidents.</li><li>
Generate reports for stakeholders, summarizing cloud security posture, risks, and improvements.</li><li>
Stay up-to-date with evolving cloud security trends, technologies, and threats.</li><li>
Provide recommendations to enhance the overall cloud security posture and align with organizational goals.</li></ul><p></p><p><b>
Suggested Skills</b></p><ul><li>
Financial industry experience</li><li>
Knowledge of Cloud/Azure best security practices, DLP and how to configure best practices for data protection and how to discover sensitive data/PII and preform security assessments on cloud environments</li><li>
Experience with cloud provider and using security tools and techniques.</li><li>
Knowledge of cloud services and their attack surface.</li><li>
Related industry certifications (Sec+, CTIA, CISSP)
</li></ul><p></p><p><b>Qualifications</b></p><ul><li>
Bachelor's Degree in Computer Science, Cybersecurity, or similar work experience in a related field</li><li>
Cloud security experience
</li><li>2-3 years of cyber security experience
</li><li>Constant learner
</li><li>Has experience in at least one of the main cloud providers (AWS, Azure, Google)</li></ul><p></p><p>
Customers Bank is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.</p><p></p><p><br>
We also provide &ldquo;reasonable accommodations&rdquo;, upon request, to qualified individuals with disabilities, in accordance with the Americans with Disabilities Act and applicable state and local laws.</p><p></p><p><br>
Diversity Statement:</p><p></p><p><br>
At Customers Bank, we believe in working smart, working together, and having fun while delivering innovative solutions and memorable experiences for our customers. We are committed to the continual advancement of a culture which reflects the value we place on diversity, equity, and inclusion. We honor the diverse experiences, perspectives, and identities of our team members, and we recognize that it is their passion, creativity, and integrity that drives our success. Step into your future with us! Let&rsquo;s take on tomorrow.</p></div><p></p>

Cloud Security Specialist

Dragonfli Group LLC

<div><p><b>ABOUT DRAGONFLI GROUP</b></p><p>
Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal, state, and municipal government agencies as well as Fortune 100 enterprises. Headquartered in Washington, DC, Dragonfli supports clients in securing mission-critical systems across on-site, hybrid, and fully remote environments.</p><p></p><p><b><br>
ROLE SUMMARY</b></p><p>
Dragonfli Group is seeking an experienced Senior Cloud Security Architect to support a federal government client. In this role, you will lead the strategic vision for protecting a large-scale multi-cloud ecosystem, designing security blueprints that govern the entire digital footprint&mdash;from identity perimeters to AI-driven threat detection. This position requires a &quot;Security as Code&quot; mindset, where automated guardrails empower development teams to move at speed without compromising data or infrastructure safety.</p><p>
The ideal candidate brings 12+ years of cybersecurity experience, with at least 6 years architecting secure cloud environments at scale across AWS, Azure, or GCP. You will serve as a trusted security advisor, bridging the gap between DevOps agility and rigorous regulatory compliance in a high-visibility federal environment.</p><p></p><p><b><br>
KEY RESPONSIBILITIES</b></p><ul><li>
Lead the design of a global Zero Trust architecture, ensuring robust identity governance (IAM), network micro-segmentation, and data encryption across AWS, Azure, and/or GCP</li><li>
Architect specialized security frameworks for AI/ML pipelines, focusing on data privacy for training sets, model integrity, and securing LLM-integrated applications against emerging attack vectors</li><li>
Develop and enforce enterprise-wide security policies using Infrastructure-as-Code tools (e.g., Terraform), ensuring non-compliant infrastructure is automatically remediated or blocked from deployment</li><li>
Design and oversee integration of CNAPP and CSPM tools to provide real-time visibility into misconfigurations, vulnerabilities, and excessive permissions</li><li>
Conduct deep-dive threat modeling for complex cloud-native systems, simulating advanced persistent threats (APTs) and blast-radius scenarios to strengthen system resilience</li><li>
Drive the organization's transition to a Zero Standing Privilege model for all production environments</li><li>
Achieve automated auditing for core compliance frameworks, including NIST and CIS Benchmarks</li><li>
Leverage AI-driven monitoring to minimize Mean Time to Detect (MTTD) anomalous cloud activity</li><li>
Act as lead security advisor for the Cloud Architecture team, bridging DevOps agility with rigorous regulatory compliance (SOC 2, FedRAMP)</li><li>
Communicate security risks, architecture decisions, and roadmap recommendations clearly to C-suite and executive stakeholders</li><li>
Embed automated security testing (SAST/DAST/SCA) directly into CI/CD pipelines as part of a mature DevSecOps practice</li></ul><br>
<p></p>
Requirements:<br>
<br>
<p><b>Must-Have Qualifications</b></p><ul><li>
12+ years of experience in Cybersecurity, with at least 6 years focused on architecting secure cloud environments at scale</li><li>
Demonstrated expertise designing and implementing Zero Trust architectures across multi-cloud environments (AWS, Azure, or GCP)</li><li>
Expert knowledge of Identity-First Security, including Cloud Infrastructure Entitlement Management (CIEM), Just-In-Time (JIT) access provisioning, and complex OIDC/SAML federation flows</li><li>
Hands-on proficiency with cloud-native security suites: AWS Security Hub, Azure Defender, and/or GCP Security Command Center</li><li>
Experience developing Policy as Code frameworks using Terraform or equivalent IaC tooling for automated compliance enforcement</li><li>
Proficiency in scripting and automation languages (Python, Go, or Bash) for custom security automations and SOAR platform integration</li><li>
Deep experience embedding security testing (SAST/DAST/SCA) into CI/CD pipelines within a DevSecOps framework</li><li>
Advanced understanding of secure cloud networking, including SD-WAN, Cloud WAF, and Zero Trust Network Access (ZTNA)</li><li>
Working knowledge of CNAPP and CSPM tooling for cloud posture management and misconfiguration remediation</li><li>
Familiarity with regulatory and compliance frameworks including NIST, CIS Benchmarks, and SOC 2</li></ul><p></p><p><b><br>
Preferred / Desired Qualifications</b></p><ul><li>
Advanced degree in Computer Science, Cybersecurity, or a related engineering discipline</li><li>
Active top-tier security certifications (e.g., CISSP, CCSP, AWS Security Specialty, GCP Professional Cloud Security Engineer, Azure Security Engineer Associate, or equivalent)</li><li>
Prior experience in a federal government or public-sector consulting environment; familiarity with FedRAMP and FISMA compliance</li><li>
Experience architecting security frameworks for AI/ML pipelines and LLM-integrated applications</li><li>
Proven track record implementing Zero Standing Privilege models in large enterprise or government environments</li><li>
Experience operating at the executive advisory level, presenting security risk posture and roadmap to C-suite leadership</li><li>
Familiarity with SOAR platforms and AI-driven threat detection tooling for cloud environments</li></ul><br>
<p></p>
Skill(s):<br>
<br>
<p><b>TECHNICAL SKILLS</b></p><p><b>
Cloud Security Platforms</b></p><ul><li>
AWS Security Hub, Amazon GuardDuty, AWS IAM, AWS Organizations SCPs</li><li>
Microsoft Azure Defender for Cloud, Azure Sentinel, Azure Active Directory / Entra ID</li><li>
Google Cloud Security Command Center, Chronicle SIEM</li></ul><p><b>
Identity &amp; Access Management</b></p><ul><li>
Cloud Infrastructure Entitlement Management (CIEM)</li><li>
Just-In-Time (JIT) access provisioning frameworks</li><li>
OIDC, SAML 2.0, OAuth 2.0 federation and SSO architectures</li></ul><p><b>
Automation &amp; DevSecOps</b></p><ul><li>
Infrastructure as Code: Terraform, AWS CloudFormation, Pulumi</li><li>
Scripting: Python, Go, Bash</li><li>
CI/CD security integration: SAST, DAST, SCA tooling (e.g., Snyk, Checkov, Semgrep)</li><li>
SOAR platforms: Splunk SOAR, Microsoft Sentinel Automation, Palo Alto XSOAR</li></ul><p><b>
Cloud Networking &amp; Perimeter</b></p><ul><li>
Zero Trust Network Access (ZTNA) architecture and implementation</li><li>
Cloud WAF, SD-WAN, and secure connectivity design</li><li>
Network micro-segmentation and east-west traffic controls</li></ul><p><b>
Compliance &amp; Governance</b></p><ul><li>
NIST SP 800-53, CIS Benchmarks, SOC 2, FedRAMP, FISMA</li><li>
CNAPP and CSPM tools: Prisma Cloud, Wiz, Orca Security, or equivalent</li><li>
Threat modeling methodologies: STRIDE, MITRE ATT&amp;CK for Cloud</li></ul><br>
<p></p>
Benefits:<br>
<br>
<p>Dragonfli Group offers a comprehensive benefits package to support the health, financial well-being, and work-life balance of our team members:</p><ul><li>
Insurance &ndash; Comprehensive health, dental, and vision coverage for employees and eligible dependents</li><li>
Paid Time Off (PTO) and 11 Federal Holidays &ndash; Generous PTO accrual plus all 11 federally recognized holidays</li><li>
401(k) with Employer Match &ndash; Competitive employer match to support your long-term financial goals</li></ul></div>

Senior Cloud Security Architect

Secova

<p>We are hiring an <b>Oracle Fusion GRC Security Consultant</b> to support Oracle ERP security and governance initiatives. This role will focus on <b>Oracle Fusion security configuration, GRC controls, and integration between Oracle EPM and Oracle Risk Management Cloud</b>.</p><p>Key Responsibilities</p><ul><li>Design and implement <b>Oracle Fusion ERP security roles and access controls</b></li><li>Configure and support <b>Oracle Risk Management Cloud</b></li><li>Perform <b>security configuration, testing, and control validation</b></li><li>Support <b>integration between Oracle EPM and Oracle ERP</b></li><li>Ensure <b>Segregation of Duties (SoD) and GRC compliance</b></li><li>Work with <b>functional and technical teams</b> on ERP security</li><li>Document security configurations and testing results</li><li>Support <b>ERP security audits and compliance reviews</b></li></ul><p>Required Skills</p><ul><li>Strong experience in <b>Oracle Fusion ERP Security</b></li><li>Experience with <b>Oracle Risk Management Cloud</b></li><li>Knowledge of <b>Oracle GRC modules and SoD controls</b></li><li>Experience with <b>ERP security role design and access management</b></li><li>Experience supporting <b>Oracle EPM integrations</b></li></ul><p>Work Details</p><ul><li><b>Location:</b> Chicago, IL (Onsite)</li><li><b>Contract:</b> 4 Months</li><li><b>Start Date:</b> March 30, 2026</li><li><b>Hours:</b> 40 per week</li></ul><p>Pay: $58.67 per hour</p><p>Work Location: In person</p>

Oracle Fusion GRC Security Consultant

Fortinet

<div><p><b>Cloud Engineer (Preferred Location: Saudi Arabia)
</b></p><p>This individual will be part of the Fortinet Cloud Solutions Architecture team, focusing on the <b>implementation, deployment, and optimization of network and security cloud environments </b>across public cloud platforms.
</p><p>The Cloud Engineer will work closely with Cloud Solution Architects, customer technical teams, and DevOps teams to <b>translate architecture designs into production-ready deployments </b>, ensuring secure, scalable, and automated cloud environments.
</p><p>The ideal candidate is highly hands-on, with strong experience in <b>cloud infrastructure deployment, automation, and security implementation </b>, and is passionate about delivering high-quality solutions in complex enterprise environments.
</p><p><b>Key Responsibilities:
</b></p><p><b>1) Cloud Implementation &amp; Deployment
</b></p><ul><li>Deploy and implement <b>secure cloud landing zones </b>based on approved architectures across AWS, Azure, GCP, OCI and AliCloud
</li><li>Configure and integrate <b>Fortinet security solutions </b>(e.g., FortiGate, FortiManager, FortiAnalyzer, FortiWeb, FortiSandbox) within cloud environments
</li><li>Implement cloud networking components including VPC/VNet design, routing, load balancing, VPN, and hybrid connectivity
</li><li>Execute workload onboarding, migration activities, and environment provisioning
</li><li>Ensure deployments follow security, compliance, and operational best practices
</li></ul><p><b>2) Automation &amp; DevOps Engineering
</b></p><ul><li>Develop, maintain, and enhance <b>Infrastructure as Code (IaC) </b>using tools such as Terraform, CloudFormation, or ARM templates
</li><li>Build and manage <b>CI/CD pipelines </b>for automated infrastructure and security deployments
</li><li>Create reusable modules, templates, and scripts to standardize and accelerate delivery
</li><li>Integrate security controls into DevOps workflows (DevSecOps practices)
</li><li>Automate validation, testing, and compliance checks for cloud environments
</li></ul><p><b>3) Troubleshooting &amp; Optimization
</b></p><ul><li>Troubleshoot and resolve issues across cloud infrastructure, networking, and security components
</li><li>Optimize cloud environments for <b>performance, cost-efficiency, and security posture
</b></li><li>Implement and integrate monitoring, logging, and alerting solutions
</li></ul><p><b>4) Technical Delivery &amp; Collaboration
</b></p><ul><li>Collaborate with Cloud Solution Architects to translate <b>HLDs into LLDs and implemented solutions
</b></li><li>Work closely with customer engineering, DevOps, and security teams during delivery engagements
</li><li>Participate in <b>hands-on workshops, build sessions, and deployment activities
</b></li><li>Provide detailed <b>as-built documentation, runbooks, and knowledge transfer </b>to customer teams
</li><li>Ensure timely and high-quality delivery of implementation services
</li></ul><p><b>Required Skills &amp; Experience:
</b></p><ul><li>6&ndash;12 years of experience in roles such as <b>Cloud Engineer, Net-Sec Engineer, or Cloud Consultant (delivery-focused) </b>with a heavy focus on Cloud Networking and Cybersecurity.
</li><li>Strong hands-on experience with at least one major cloud provider: <b>AWS, Azure, or GCP </b>(multi-cloud experience is a plus)
</li><li>Proven experience in <b>cloud infrastructure deployment and configuration </b>, including networking and security
</li><li>Strong expertise in <b>Infrastructure as Code (IaC) </b>tools, preferably <b>Terraform
</b></li><li>Experience with <b>CI/CD tools </b>such as GitLab CI, GitHub Actions, Jenkins, or similar is a plus
</li><li>Solid scripting skills using <b>Python, Bash, or similar languages
</b></li><li>Hands-on experience with <b>cloud networking </b>(VPC/VNet, routing, VPN, load balancing, DNS)
</li><li>Understanding of <b>cloud security best practices </b>, including IAM, segmentation, and threat protection
</li><li>Experience deploying and managing <b>network security solutions </b>(Fortinet experience is highly desirable)
</li><li>Familiarity with <b>containers and Kubernetes </b>is a plus
</li><li>Experience with <b>monitoring and logging tools </b>in cloud environments
</li><li>Strong troubleshooting and problem-solving skills
</li></ul><p><b>Preferred Qualifications
</b></p><ul><li>Cloud certifications (e.g., <b>professional-level networking certifications </b>such as AWS Certified Advanced Networking &ndash; Specialty, Microsoft Certified: Azure Network Engineer Associate, and Google Professional Cloud Network Engineer)
</li><li>Experience with <b>hybrid and multi-cloud environments
</b></li><li>Prior experience in <b>consulting or professional services delivery
</b></li><li>Familiarity with <b>DevSecOps practices and security automation
</b></li></ul><p><b>Education:
</b></p><ul><li>Bachelor&rsquo;s Degree in Computer Science, Engineering, or related field, or equivalent experience
</li></ul><p>#LI-NC1</p></div>

Cloud Engineer

Reveal Risk

<p></p><div><div><div><p>Cybersecurity Consultant (Technical).</p>
</div>
<div><p>Indianapolis, IN</p>
</div>
<div><p>Full-time | 2&ndash;4 years of experience | Indianapolis, IN (local only)</p></div><div><br>
<p>
</p></div><div><p>Reveal Risk is hiring a full-time Cybersecurity Consultant (Technical focus) to join our Indianapolis team &mdash; ideally someone coming from a corporate cybersecurity or enterprise IT and/or security role who is excited to make the jump into consulting. This is an early to mid-level role for someone with 2&ndash;4 years of hands-on cybersecurity or IT experience who enjoys owning technical workstreams end-to-end across a wide mix of security domains, tools, and client environments.</p>
</div>
<div><p>You will partner with senior consultants on engagements focused on technical assessments, cloud and endpoint security, identity, vulnerability management, and security architecture review. Over time you will also have the opportunity to lead smaller engagements end-to-end. You will combine real technical curiosity with clear communication to help clients reduce risk and implement practical controls.</p>
</div>
<div><p><b>KEY RESPONSIBILITIES</b></p>
</div>
<div><ul><li><p>Client Project Delivery (~80% of working hours): Independently own technical workstreams within client engagements, partner with senior consultants on strategy and direction, and occasionally lead smaller engagements end-to-end. Deliver clear, pragmatic, right-sized outcomes for each client.</p>
</li>
</ul></div><div><ul><li>Own individual workstreams end-to-end with minimal oversight &mdash; plan, execute, QC, and deliver high-quality work products.</li>
</ul></div><div><ul><li>Perform technical and control-level assessments across domains such as identity and access management, cloud security (AWS, Azure, and/or GCP), endpoint, network, vulnerability management, logging and monitoring, and backup/recovery.</li>
</ul></div><div><ul><li>Review client security configurations, architecture diagrams, and tooling to identify gaps and recommend practical improvements.</li>
</ul></div><div><ul><li>Support (and occasionally lead) vulnerability management engagements, scanner tuning, prioritization, remediation planning, and flexibility using multiple tools or what the client may have.</li>
</ul></div><div><ul><li>Partner with the Reveal Risk team to drive penetration testing engagements &mdash; serving as the primary engagement lead between our penetration testers and our clients, coordinating scoping, kickoff, status, findings review, and remediation follow-through.</li>
</ul></div><div>Assess and tune endpoint protection, EDR/XDR, email security configurations. You don't need expertise in every platform but should be able to have a working understanding of alerts, read the logs and the interest to depend your understanding in that skillset.<br>
<ul><li>
</li>
<li>Contribute to cloud security reviews using frameworks such as CIS Benchmarks, AWS Well-Architected Security Pillar, and Microsoft Cloud Security Benchmark.</li>
</ul></div><div><ul><li>Facilitate client workshops, whiteboarding sessions, and working meetings to walk through findings, recommendations, and remediation approaches.</li>
</ul></div><div><ul><li>Translate technical findings and risks into business value, not just technical language, so client leadership understands the &quot;so what&quot; and can act on it.</li>
</ul></div><div><ul><li>Adapt communication style to different stakeholder audiences (engineers, IT leadership, executives) and keep clients informed between touchpoints to build trust.</li>
</ul></div><div><ul><li>Build clear, professional technical deliverables (assessment reports, findings matrices, architecture diagrams, remediation plans, runbooks) for both technical and executive audiences.</li>
</ul></div></div><div><div>Plan and track your own workstreams using strong project management practices (scope, milestones, status, risks); escalate blockers early.<br>
<ul><li>
</li>
<li>Provide light support to business development activities as needed, such as scoping calls, proposal content, and follow-ups for prospective clients.</li></ul></div><br>
<div>
</div><p></p><div><ul><li><p>Internal Collaboration and Service Development (~15%): Contribute to knowledge sharing, technical playbook refinement, cross-service collaboration, and the overall quality of the technical practice.</p>
</li>
</ul></div><div><ul><li>Suggest and help document improvements to assessment workbooks, architecture review templates, checklists, and technical delivery accelerators based on what you learn in client work.</li>
</ul></div><div><ul><li>Actively share knowledge from your engagements &mdash; new tools, techniques, attack trends, useful scripts &mdash; in internal sessions and written form.</li>
</ul></div><div><ul><li>Collaborate across Reveal Risk service lines (Strategy/CISO, GRC, Human Risk Management, Resiliency Planning, Technical Services) to bring the right mix of expertise to each client problem.</li>
</ul></div><div><ul><li>Willingness to help onboard interns, rotating team members, and newer associates as opportunities arise.</li>
</ul></div><div><ul><li>Participate in a culture that values transparency, humility, and feedback, both giving and receiving across all levels of the organization.</li><br>
</ul>
</div><div><ul><li><p>Professional Growth and Industry Engagement (~5%): Continue developing your technical depth and representing the firm in the Indianapolis cybersecurity community.</p>
</li>
</ul></div><div><ul><li>Pursue and maintain relevant technical certifications or training (examples: Security+, Network+, CySA+, GIAC GSEC/GCIH, AWS/Azure security associate, CCSP).</li>
</ul></div><div><ul><li>Attend local industry events, chapter meetings, CTFs, or working groups (ISSA, InfraGard, OWASP, or other local IT and cybersecurity user groups).</li>
</ul></div><div><ul><li>Bring back new tools, attack trends, and emerging defenses to help evolve the practice.</li>
</ul>
</div><div><p><b>QUALIFICATIONS</b></p>
</div>
<div><p><b>Required</b></p>
</div>
<div>2&ndash;4 years of hands-on professional experience in cybersecurity, systems administration, network engineering, cloud engineering,IT infrastructure, or a closely related technical field.<br>
<ul><li>
</li>
Working, hands-on knowledge of at least two of the following: identity and access management, endpoint/EDR, cloud security (AWS, Azure, or GCP), vulnerability management, network security, or SIEM/logging.<br>
<li>
</li>Comfortable reading and reasoning about system architectures, configurations, and technical documentation.<br>
<li>
</li>
Ability to independently manage individual workstreams across 2&ndash;4 concurrent client projects, prioritize your own work, and deliver high-quality output with minimal oversight.<br>
<li>
</li>
Ability to understand how your work fits into the client&rsquo;s broader business problem and communicate technical findings in business terms.<br>
<li>
</li>
Strong communication skills &mdash; able to explain technical findings and risks to both technical and non-technical audiences.<br>
<li>
</li>
High attention to detail and a personal bar for the quality, clarity, and professionalism of deliverables.<br>
<li>
</li>
Organized and self-directed; fluent in basic project management practices such as tracking scope, milestones, risks, and action items.<br>
<li>
</li>
Collaborative, humble, team-first mindset with a genuine interest in growing as a consultant.<br>
<li>
</li>
<li>Resides in the Indianapolis, IN metro area (or willing to relocate at own expense before start date). Relocation assistance is not offered.</li>
</ul>
</div></div><div><div><p><b>Preferred (Not Required)</b></p>
</div>
<div><ul><li><p>Bachelor&rsquo;s degree in Information Security, Computer Science, Information Systems, Network Engineering, or a related technical field.</p>
</li>
</ul></div><div><ul><li><p>Previous consulting or advisory experience (boutique firm, Big 4, or internal consulting function). One or more professional certifications (current or expired), such as: Security+, Network+, CySA+, CEH, GSEC, GCIH, AWS Certified Security &ndash; Specialty, Microsoft SC-200/SC-100, CCSP, or OSCP.</p>
</li>
</ul></div><div><ul><li><p>Hands-on exposure to any of the following technical cybersecurity areas:</p>
</li>
</ul></div><div><ul><li>Identity and Access Management (IAM) and/or Privileged Access Management (PAM) Cloud security (AWS, Azure, GCP) &mdash; configuration review, guardrails, CSPM tooling</li>
</ul></div><div><ul><li>Endpoint security and EDR/XDR (CrowdStrike, SentinelOne, Microsoft Defender) Vulnerability and threat management (Tenable, Qualys, Rapid7, Wiz) SIEM, logging, and detection engineering (Splunk, Microsoft Sentinel, Elastic)</li>
</ul></div><div><ul><li>Security architecture review and reference architecture development</li>
</ul></div><div><ul><li>Infrastructure or systems administration background (Windows, Linux, Active Directory, Entra ID)</li>
</ul></div><div><ul><li>Implementation or tuning of security tools (IAM, PAM, EDR, email security, backup)</li>
</ul>
</div><div><p><b>BENEFITS</b></p>
</div>
<div><ul><li><p>Competitive salary (target range: [$70,000 &ndash; $105,000] and team profit-sharing plan. Comprehensive benefits package including:</p>
</li>
</ul></div></div><div><div><ul><li>Health, dental, and vision insurance (99% employer-paid premiums)</li>
</ul></div><div><ul><li>401(k) with company match</li>
</ul></div><div><ul><li>Paid time off and company holidays</li>
</ul></div><div><ul><li>Flexible work schedule</li>
</ul></div><div><ul><li>Professional development assistance</li>
</ul></div><div><ul><li>And more!</li>
</ul>
</div><div><p><b>OTHER POSITION DETAILS</b></p>
</div>
<div><ul><li><p>Full-time, exempt position. Based in Indianapolis, IN &mdash; local candidates only. Flexible work model blending Indy-area office days, home office, and client sites; this is not a remote-from-anywhere role and relocation is not offered.</p>
</li>
</ul></div><div><ul><li><p>Occasional travel (0&ndash;20%) for client workshops, team meetings, or industry events.</p>
</li>
</ul></div><div><ul><li><p>Monday&ndash;Friday, 8 hours/day with some flexibility as long as core working hours of 9am&ndash;4pm ET are covered.</p>
</li>
</ul></div><div><p><b>OUR CORE VALUES</b></p>
</div>
<div><ul><li><p>We work with integrity, transparency, and trust.</p>
</li>
</ul></div><div><ul><li><p>We listen and reduce ambiguity to create win:win solutions.</p>
</li>
</ul></div><div><ul><li><p>We are a collaborative team that celebrates shared success.</p>
</li>
</ul></div><div><ul><li><p>We are enthusiastic, confident, humble, and professional.</p>
</li>
</ul></div><div><p><b>ABOUT REVEAL RISK</b></p>
</div>
<div><p>Reveal Risk is a dynamic and growing boutique consulting company specializing in cybersecurity and risk management. We are a team of passionate experts dedicated to helping our clients navigate complex challenges and achieve their goals.</p>
</div>
<div><p>We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.</p>
</div>
</div><div><p>Learn more about careers with Reveal Risk at https://www.revealrisk.com.</p></div><div><p><br>
</p></div><br>
<br>
<br>
<br>
Applicant Tracking Software by ExactHire: pzg60mrl4o2prn42w9xo</div>

Cybersecurity Consultant (Carmel IN, U.S. Based)

Search 10000+ Cloud security consultant jobs near you this May. New roles added regularly across leading industries. Apply today.