cloud security specialist

Holland & Barrett International Limited

<p>About the role:</p> <p><strong>Join Our Team at Holland & Barrett!</strong></p> <p>Are you passionate about cloud security and looking to make a significant impact? Holland & Barrett is seeking a <strong>Cloud Security Specialist</strong> to help us define and implement our cloud security strategy. If you're an experienced professional eager to work with cutting-edge technology and collaborate with diverse teams, we want to hear from you!</p> <p><strong>Key Responsibilities:</strong></p> <ul> <li><strong>Security Strategy:</strong> Help define and execute the Holland & Barrett cloud security strategy, partnering with platform and Site Reliability Engineering (SRE) teams to build robust infrastructure that supports our business.</li><li><strong>Perimeter Security:</strong> Establish platform perimeter security by implementing controls at ingress and egress points, including creating and maintaining an edge network with a Web Application Firewall (WAF), Distributed Denial of Service (DDoS) protection, and a Content Delivery Network (CDN).</li><li><strong>Access Control:</strong> Establish an access control baseline focusing on the principle of least privilege and segregation of duties. Monitor and enforce these controls once roles and permissions are set.</li><li><strong>Security Controls:</strong> Design, implement, and maintain security controls to prevent, detect, and remediate insecure configurations, including defining and disseminating secure AWS/infrastructure baselines.</li><li><strong>Standards Development:</strong> Own the development and maintenance of tailored security standards and guidelines, creating reusable resources for various development teams.</li><li><strong>AWS Security Services:</strong> Establish and manage AWS security services, including certificate authorities, encryption services, insecure configuration scanners, and security control canaries.</li></ul> <p>Key requirements:</p> <p><strong>Essential:</strong></p> <ul> <li>5+ years of experience in cloud security, particularly with AWS, and at least 2+ years in software development.</li><li>Strong understanding of cloud and application security concepts, including secure coding practices, threat modeling, vulnerability management, and access control mechanisms.</li><li>Experience with AWS, Kubernetes, Service Mesh, API gateways, and API Security (authentication and authorization).</li><li>Proficiency in programming languages such as Python, JavaScript, GoLang, Terraform, CloudFormation (AWS), and AWS CDK.</li><li>Familiarity with Agile methodologies like SCRUM, along with proven project management skills to manage multiple security projects effectively.</li></ul> <p><strong>Desired:</strong></p> <ul> <li>Ability to work independently, take initiative, and maintain a keen attention to detail, ensuring high security standards.</li><li>Strong communication and interpersonal skills, facilitating effective collaboration with both technical and non-technical teams.</li></ul> <p><strong>Why Holland & Barrett?</strong></p> <p>At Holland & Barrett, we are dedicated to promoting health and well-being while ensuring the highest standards of cloud security. Join our team and be part of a company that values innovation and security.</p> <p><strong>Ready to Make an Impact?</strong></p> <p>If you're excited about cloud security and want to contribute to a secure future, apply now! We look forward to welcoming you to our team.</p> <p>We support flexibility and productivity of our employees by hybrid working arrangements. Although your role will be based in London (or Nuneaton, or Amsterdam) you will be required to travel only occasionally to our Hubs in Nuneaton or London or to any other location of H&B. </p> <p>What we offer:</p> <p><strong>Benefits</strong></p> <p><strong>Wellbeing & Lifestyle Benefits</strong> </p> <ul> <li>Health Cash Plan </li><li>Life Assurance </li><li>Incentive Scheme</li><li>Virtual GP </li><li>Private Medical</li><li>FREE at-home blood test kit </li><li>Holiday Purchase option </li><li>Pension Contribution </li><li>Access to 'Wellhub' with gyms, studios and wellbeing apps </li></ul> <p><strong>Discounts & Savings</strong> </p> <ul> <li>25% Colleague Discount with FREE Next Day Delivery </li><li>Exclusive Discounts from a wide range of partners </li><li>£/€50 Annual Product Allowance to spend in store </li></ul> <p><strong>Learning & Development</strong> </p> <ul> <li>Access to a variety of learning opportunities, including Level 2-5 Apprenticeships, Workshops and our Digital Learning Library </li><li>AND MORE! </li></ul> <p>We're passionate about helping every colleague thrive across all dimensions of wellbeing, and we're committed to having a diverse and inclusive workplace. In line with our EPIC values (Expertise, Pioneering, Inclusive, Caring), we embrace and actively celebrate all our colleagues' unique and varying experiences, backgrounds, identities and cultures - I am me, we are H&B. </p> <p>Holland & Barrett does not accept unsolicited resumes from search firms/recruiters. Please do not forward resumes to our job alias, employees, or any other company location. Holland & Barrett is not and will not be responsible for any fees if a candidate submitted by a search firm/recruiter unless otherwise agreed with respect to specific open position(s). </p> <p></p>

Senior Cloud Security Engineer

Al Adyat consultancy

<p>We are seeking a skilled and experienced Cloud Security Architect to lead our security architecture in our cloud environment.</p><p>This role involves designing, developing, and managing robust cloud security solutions, implementing cloud security controls, and ensuring compliance with security protocols and procedures.</p><p>The ideal candidate will have strong knowledge of cloud computing and security frameworks, with demonstrated experience with various cloud platforms such as AWS, Azure, and Google Cloud.</p><p><b>Responsibilities</b></p><ul><li>Design and develop a comprehensive cloud security architecture.</li><li>Ensure that cloud-based systems are designed and implemented to high security standards.</li><li>Create and maintain security protocols and procedures.</li><li>Perform regular security assessments and audits.</li><li>Develop strategies to handle security incidents and coordinate responses to security breaches.</li><li>Stay up-to-date with the latest security systems, standards, authentication protocols, and products.</li><li>Train staff on cloud security risks and preventive measures.</li><li>Collaborate with IT operations and software development teams to ensure secure design and development of applications and systems.</li></ul><p><b>Qualifications</b></p><ul><li>Proven experience as a Cloud Security Architect or similar role in information security.</li><li>Proficiency in cloud platforms such as AWS, Azure, Google Cloud, etc.</li><li>Strong knowledge of cloud security frameworks and best practices.</li><li>Experience with security technologies including Firewalls, DLP, Network Intrusion Detection, and Secure Coding Practices.</li><li>Understanding of network and web related protocols.</li><li>BSc/MSc degree in Computer Science, Cybersecurity or a related field.</li><li>Professional security management certification, such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).</li></ul><p><b>Cloud Security Architect Qualifications and Skills</b></p><p>A proficient Cloud Security Architect should possess a blend of technical knowledge, soft skills, and industry-specific expertise, such as:</p><ul><li>Expertise in cloud security architecture and strategy, with comprehensive knowledge of cloud computing and service delivery concepts.</li><li>Hands-on experience in designing and implementing security solutions that align with business needs, regulatory requirements, and risk tolerance levels.</li><li>Strong analytical skills to evaluate complex cloud environments, identify security threats, and develop innovative solutions.</li><li>Exceptional communication skills to articulate security principles, guidelines, and best practices to stakeholders at all levels.</li><li>Ability to collaborate effectively with IT, business, and cybersecurity teams to ensure the seamless integration of security controls.</li><li>Understanding of cloud service models (IaaS, PaaS, SaaS), cloud deployment models (Public, Private, Hybrid), and key cloud providers (AWS, Azure, Google Cloud).</li><li>Experience with cloud security technologies, encryption algorithms, secure coding practices, and incident response procedures.</li><li>Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), or Certified Information Security Manager (CISM).</li></ul><p><b>Cloud Security Architect Experience Requirements</b></p><p>Cloud Security Architects usually start with a bachelor&rsquo;s degree in computer science, information technology, cybersecurity or a related field, and they often hold industry-specific certifications.</p><p>They must have significant practical experience, typically around 5 to 10 years in IT security roles.</p><p>Entry-level Cloud Security Architects may have spent a few years in roles such as Security Analyst, Network Engineer, or Systems Administrator.</p><p>They are likely to have hands-on experience in cloud environments, dealing with security threats and managing security protocols.</p><p>Mid-level Cloud Security Architects are typically required to have a minimum of 5 years of experience with security protocols and systems.</p><p>They are expected to have advanced technical skills, understanding of cloud-based applications, and knowledge of emerging security threats.</p><p>Senior Cloud Security Architects should have over 10 years of experience in the field, with a solid background in designing, implementing, and managing secure cloud infrastructures.</p><p>Additionally, they should have leadership experience, as they are often responsible for leading teams and making strategic decisions about cloud security policies and procedures.</p><p>All levels of Cloud Security Architects are expected to keep up-to-date with the latest security systems, threats, and mitigation strategies.</p><p>They should also have experience with specific cloud platforms such as Amazon Web Services (AWS), Google Cloud Platform (GCP), or Microsoft Azure.</p><p>Job Type: Full-time</p><p>Pay: QAR40,000.00 - QAR55,000.00 per month</p><p>Education:</p><ul><li>Bachelor's (Required)</li></ul><p>Experience:</p><ul><li>Cloud Security Architect : 5 years (Required)</li></ul><p>Language:</p><ul><li>Arabic (Required)</li><li>English (Required)</li></ul><p>License/Certification:</p><ul><li>degree in computer science, information technology (Required)</li></ul>

Cloud Security Architect

Ericsson

<div><div><div><div><h2 class="jobSectionHeader"><b>About this opportunity:</b></h2>
</div><div><p>
As the Company at the forefront of the creation of the Mobile world, and with more than 60,000 patents to our name, we&rsquo;ve made it our business to make a mark. Being part of Ericsson empowers you to learn, lead and perform at your best, shaping future technology. Ericsson is an inclusive employer where you are recognized for the skills, talent, and perspective you bring to the team.<br>
Within the Solution Area Cognitive Networks Solutions Software R&amp;D (SA CNS SW R&amp;D), we offer the opportunity to collaborate with highly qualified Global teams and to enable success stories for our customers. You will be exposed to groundbreaking technology (5G, ML/AI, Automation and Cloud computing) and support the delivery of multiple Data-Intensive projects from our customer base and internal requirements. You must have the ability to perform hands-on Cloud and Data engineering tasks independently coupled with the appropriate testing. Are you ready to write the future with us?<br>
Come, and be where it begins.</p><p></p><p><br>
We are seeking a seasoned Cloud Security Lead to explore, design, and test the proper architecture on AWS to enable large-scale, high-performing, distributed cloud-native-based SaaS applications. As a Cloud Security Lead in CNS R&amp;D Product Development Unit (PDU), your knowledge of software architecture will be key to supporting our different applications and customer scenarios, ensuring a smooth transition from development to production and maintenance. This position demands in-depth expertise in AWS technologies, you will establish best practices, optimize service reliability, and continuously improve security and performance across a multi-tenant SaaS environment. You will collaborate with cross-functional teams, including product owners, domain experts, and technical leads, to provide our products with reliability and scalability.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
What you will do:</b></h2>
</div><div><p>
SaaS Multi-tenant Architecture and Innovation</p><ul><li><ul><li>
Lead the system architecture, design, and implementation for our Cognitive Software products.</li><li>
Analyze and design secure systems, aligning with Ericsson Security Design Rules.</li><li>
Evaluate impacts, dependencies, and risks for both functional and non-functional requirements.</li><li>
Stay ahead of IT technology evolution and drive adaptation within the team.</li></ul></li></ul><p>
DevSecOps &amp; Compliance</p><ul><li><ul><li>
Embed Security best practices within the software development lifecycle, covering identity and access management (IAM), networking, VPC, encryption, and monitoring.</li><li>
Ensure adherence to cloud compliance standards (SOC 2, HIPAA, GDPR, etc.), performing regular audits and vulnerability scans to maintain a robust security posture.</li></ul></li></ul><p>
Collaboration and Leadership</p><ul><li><ul><li>
Work closely with other system architects to enforce common practices and streamline our product suite.</li><li>
Mentor technical leaders, promoting a collaborative, results-driven environment and advancing professional growth.</li><li>
Demonstrate thought leadership within and outside the product unit.</li></ul></li></ul><p>
Ensure Excellence</p><ul><li><ul><li>
Be accountable for delivering the right architecture and implementation that adhere to Ericsson standards.</li><li>
Align product architecture with security best practices and industry standards.</li></ul></li></ul><p>
Business alignment</p><ul><li><ul><li>
Work with product owners, development teams, and stakeholders to align Architecture and Security priorities with broader business objectives.</li><li>
Understand business processes and able to align security strategies with organizational goals.</li><li>
Ability to balance security needs with business requirements and constraints.</li></ul></li></ul><p>
Adaptability and Continuous Learning</p><ul><li><ul><li>
Stay updated with the latest security threats, trends, and technologies.</li><li>
Adapt to evolving security challenges and technologies.</li></ul></li></ul><p>
Cultural Fit</p><ul><li><ul><li>
Align with the organization's values and culture.</li><li>
Work within the organization's structure and contribute positively to its environment.</li></ul></li></ul><p>
AI &amp; Machine Learning Operations (MLOps)</p><ul><li><ul><li>
Provide operational support for AI/ML models running on AWS, collaborating with data science teams to ensure security and optimize performance and reliability.</li><li>
Embed Security within MLOps methodologies, ensuring secure, seamless model deployment, monitoring, and updates.</li></ul></li><li>
Conduct Security testing, capacity planning, and performance tuning across AWS resources.</li><li>
Foster a culture of continuous improvement, refining operational processes and enhancing platform architecture to boost resilience.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
The skills you bring:</b></h2>
</div><div><ul><li>8+ years of professional experience in software development, including hands-on design, implementation, and deployment of complex systems.</li><li>
6+ years of dedicated experience in cybersecurity, with a strong emphasis on securing AWS cloud services and infrastructure (e.g., IAM, VPC, Security Groups, Encryption, CloudTrail, GuardDuty, and compliance frameworks like NIST or CIS benchmarks).</li><li>
Hands-on experience integrating security best practices into CI/CD pipelines, leveraging GitOps tools (Argo CD, Flux) for declarative deployments.</li><li>
Knowledge of machine learning lifecycle management, ensuring secure, robust and efficient AI/ML model deployments.</li><li>
Strong background in Linux system management, performance tuning, and troubleshooting.</li><li>
Expertise in VPNs, firewalls, routing, switching, DNS, load balancers, and related security considerations.</li><li>
Demonstrated strength in diagnosing complex technical issues and effectively communicating solutions to varied stakeholders.</li><li>
Bachelor&rsquo;s degree in Computer Science, Computer Engineering, or a related field.</li></ul><p>
Cloud-Native Architecture</p><ul><li>
Expertise in cloud-native software architecture principles and patterns.</li><li>
Proficiency with Docker, Kubernetes, microservices, and event-driven architecture.</li><li>
Experience leading design phases of cloud-native applications (HLD, LLD, DD, UAT).</li><li>
Deep understanding of virtualization, networking, and storage in public cloud environments.</li><li>
Demonstrated ability to manage, operate, and secure AWS services (e.g., IAM, S3, EKS, ECS, Fargate, App Runner, RedShift, SNS, SQS, EventBridge, Athena, SageMaker, Aurora, DynamoDB, Cognito, API Gateway, etc.).</li><li>
Proven experience with Kubernetes (preferably EKS) for container orchestration, including deploying and maintaining production workloads.</li></ul><p>
Security Expertise</p><ul><li>
Deep understanding of security principles, practices, and technologies.</li><li>
Proficiency in network, cloud, application security, and data protection.</li><li>
Familiarity with security frameworks and standards (NIST, ISO 27001, CIS, etc.).</li><li>
Experience with security tools (firewalls, intrusion detection/prevention systems, encryption, vulnerability scanners).</li><li>
Proven track record in designing and implementing security architectures.</li><li>
Experience with risk assessment, threat modeling, vulnerability management, and regulatory compliance (GDPR, HIPAA, PCI-DSS).</li><li>
Preferred certifications: CISSP, CISM, CEH.</li><li>
Expertise in OWASP resources, including the Top 10 risks, Application Security Verification Standard (ASVS), Software Assurance Maturity Model (SAMM), Cheat Sheets, and their integration into Secure SDLC processes for identifying, assessing, mitigating vulnerabilities, and enhancing organizational secure development practices.</li></ul><p>
Software Development and Infrastructure Definition</p><ul><li>
Experience with API design, application security, and secrets management.</li><li>
Familiarity with CI/CD/CT pipelines and practices.</li><li>
Experience with Infrastructure-as-a-Code frameworks, preferably Terraform, ensuring production-grade, secure infrastructure definitions.</li></ul><p>
Data Management and Governance</p><ul><li>
Experience in designing scalable and efficient modern data architecture.</li><li>
Experience handling real-time and batch data at scale using distributed frameworks (Dask, Spark, etc.).</li><li>
Knowledge of data governance, data security, and privacy regulations.</li></ul></div></div></div><p><b>
Why join Ericsson?</b></p><p>
At Ericsson, you&acute;ll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what&acute;s possible. To build solutions never seen before to some of the world&rsquo;s toughest problems. You&acute;ll be challenged, but you won&rsquo;t be alone. You&acute;ll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next.<br>
<br>
<b>What happens once you apply?</b></p><p>
Click Here to find all you need to know about what our typical hiring process looks like.</p><p>
Encouraging a diverse and inclusive organization is core to our values at Ericsson, that's why we champion it in everything we do. We truly believe that by collaborating with people with different experiences we drive innovation, which is essential for our future growth. We encourage people from all backgrounds to apply and realize their full potential as part of our Ericsson team. Ericsson is proud to be an Equal Opportunity Employer. learn more.</p><p><b>
Primary country and city:</b> Egypt (EG) || Cairo</p><p><b>
Req ID:</b> 778938</p></div>

Cloud Security Lead

Iberdrola

<div>
 <strong>
  Department:
 </strong>
 Digital Platforms
 <br/>
 <br/>
 <strong>
  Reports To:
 </strong>
 Chief Technology Officer (CTO)
 <br/>
 <br/>
 <strong>
  Location:
 </strong>
 Doha
 <br/>
 <br/>
 <strong>
  Position Description
  <br/>
  <br/>
 </strong>
 East-West Digital (EWD) is seeking a highly skilled
 <strong>
  Cybersecurity Operations
 </strong>
 expert to define, implement, and continuously strengthen the company&rsquo;s cloud security strategy across Google Cloud, AWS, and Azure. This role serves as the central reference point for all matters related to cloud privacy, data protection, defensive security, and secure solution design.
 <br/>
 <br/>
 Working side-by-side with architecture, development, and product teams, the Cybersecurity Operations expert ensures that all cloud-based products are designed and delivered following a rigorous
 <em>
  Privacy &amp; Security by Design
 </em>
 approach. The position includes responsibilities across threat modelling, internal security assessments, incident response, automation of controls, and continuous posture management.
 <br/>
 <br/>
 This is a senior, high-impact role within EWD&rsquo;s cloud platform domain.
 <br/>
 <br/>
 <strong>
  Jobs To Be Done
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Define and govern EWD&rsquo;s cloud security framework:
  </li>
  <li>
   Establish best practices for cloud security and privacy across all EWD products.
  </li>
  <li>
   Maintain and enhance the organization&rsquo;s cloud security posture.
  </li>
  <li>
   Develop policies, automated controls, and preventive guardrails across cloud environments.
  </li>
  <li>
   Guide architecture and development teams:
  </li>
  <li>
   Ensure Security by Design principles are applied throughout the full product lifecycle.
  </li>
  <li>
   Provide expert guidance, architectural reviews, and periodic internal audits.
  </li>
  <li>
   Contribute to secure architecture patterns, design decisions, and implementation strategies.
  </li>
  <li>
   Perform continuous security evaluation:
  </li>
  <li>
   Identify, analyze, and remediate vulnerabilities across projects.
  </li>
  <li>
   Conduct advanced threat modelling and risk assessments.
  </li>
  <li>
   Perform internal ethical hacking when needed to validate security controls.
  </li>
  <li>
   Lead detection and incident response operations:
  </li>
  <li>
   Design and implement logging, monitoring, and alerting strategies.
  </li>
  <li>
   Detect threats using native cloud security services.
  </li>
  <li>
   Lead incident response, recovery, and post-incident forensics.
  </li>
  <li>
   Ensure governance, compliance, and architectural robustness
  </li>
  <li>
   Ensure compliance with internal standards, regulatory requirements, and cloud benchmarks.
  </li>
  <li>
   Conduct architectural reviews to identify gaps and optimize cost&ndash;security&ndash;complexity trade-offs.
  </li>
  <li>
   Support centralized management of GCP projects, AWS accounts, and Azure subscriptions.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Requirements
  <br/>
  <br/>
 </strong>
 Education:
 <br/>
 <br/>
 <ul>
  <li>
   Bachelor&rsquo;s degree in Computer Science, Engineering, or a related field.
  </li>
  <li>
   A Master&rsquo;s degree is a plus.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Experience
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   More than 5 years of experience in cloud security, cloud engineering, or related roles.
  </li>
  <li>
   Extensive hands-on experience with Google Cloud and AWS; Azure experience is a plus.
  </li>
  <li>
   Proven track record implementing DevSecOps, security automation, CI/CD pipelines, and incident response.
  </li>
  <li>
   Previous experience in the energy or utilities sector is advantageous.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Skills And Competencies
  <br/>
  <br/>
 </strong>
 <strong>
  Cloud Security &amp; Privacy
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Strong understanding of data classification, privacy, and protection mechanisms.
  </li>
  <li>
   Expertise in encryption (in transit and at rest), key management, and secret protection.
  </li>
  <li>
   Understanding of secure internet protocols and security operations.
  </li>
  <li>
   Ability to balance cost, security, and deployment complexity.
  </li>
  <li>
   Deep knowledge of the Cloud Shared Responsibility Model.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Identity &amp; Access Management
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience designing and implementing authentication and authorization for cloud resources.
  </li>
  <li>
   Advanced familiarity with:
  </li>
  <li>
   (MUST) Google Cloud: IAM, IAM Conditions, Cloud Identity, Access Context Manager
  </li>
  <li>
   (NICE TO HAVE) AWS: Identity Center, Directory Service, IAM Roles, Permission Sets, Control Tower
  </li>
  <li>
   (NICE TO HAVE) Azure: Entra ID, Conditional Access, PIM, RBAC
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Detection, Monitoring &amp; Incident Response
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Proficiency with tools such as SCC, Chronicle, Cloud Logging &amp; Monitoring, GuardDuty, Security Hub, Inspector, Sentinel, Azure Monitor, etc. (at least one of them)
  </li>
  <li>
   Ability to design logging architectures, dashboarding, alerts, and anomaly detection.
  </li>
  <li>
   Strong incident response and threat-mitigation skills.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Network &amp; Application Security
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience with edge and application protection (e.g. Cloud Armor, IAP, AWS WAF, AWS Network Firewall, Azure Front Door, etc.).
  </li>
  <li>
   Understanding of Zero-Trust principles and secure connectivity patterns.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Data Protection
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience with tools such us Cloud KMS, Secret Manager, CMEK, AWS KMS/CloudHSM, Azure Key Vault, VPC-SC, DLP frameworks, and confidential computing (at least one of them).
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Governance &amp; Compliance
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Knowledge of posture management, CIS benchmarks, regulatory frameworks, SCPs, Assured Workloads, Blueprints, etc.
  </li>
  <li>
   Ability to perform end-to-end architecture reviews with a security focus.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Soft Skills
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Structured and innovative mindset.
  </li>
  <li>
   Strong team spirit and relationship-building skills.
  </li>
  <li>
   Ability to manage complex situations with sound judgment.
  </li>
  <li>
   Resilience and composure under pressure.
  </li>
  <li>
   Entrepreneurial, proactive, and highly collaborative.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Key Performance Indicators (KPIs)
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Compliance level with EWD&rsquo;s cloud security framework across all products.
  </li>
  <li>
   Reduction of vulnerabilities and security findings over time.
  </li>
  <li>
   Mean Time to Detect (MTTD) and Mean Time to Resolve (MTTR) for security incidents.
  </li>
  <li>
   Adoption rate of automated security controls across teams.
  </li>
  <li>
   Quality and frequency of internal security audits.
  </li>
  <li>
   Improvement of EWD&rsquo;s cloud security posture metrics (SCC scores, CIS benchmarks, etc.).
   <br/>
   <br/>
  </li>
 </ul>
 Why Join Us?
 <br/>
 <br/>
 At East-West Digital, you will help shape the security foundation of a next-generation, cloud-native platform serving real-world energy applications and global customers. You will work with cutting-edge cloud and AI technologies, drive high-impact decisions, and collaborate with multidisciplinary teams in a dynamic, multicultural environment.
 <br/>
 <br/>
 East-West Digital is building the future of digital energy solutions from Doha, and this role places you at the core of that transformation&mdash;combining innovation, technical excellence, and meaningful impact across the entire organization.
 <br/>
 <br/>
 <strong>
  Informaci&oacute;n Movilidad
  <br/>
  <br/>
 </strong>
 Tenga en cuenta que cualquier solicitante que no sea ciudadano del pa&iacute;s de la vacante estar&aacute; sujeto al cumplimiento de los requisitos de inmigraci&oacute;n aplicables para trabajar legalmente en ese pa&iacute;s.
 <br/>
 <br/>
 February-15-2026
</div>


Cybersecurity Operations

<div><div>Department: Digital Platforms<br>
Reports To: Chief Technology Officer (CTO)<br>
Location: Doha</div><div></div><div>
Position Description:</div><div></div><div>
East-West Digital (EWD) is seeking a highly skilled Cybersecurity Operations expert to define, implement, and continuously strengthen the company&rsquo;s cloud security strategy across Google Cloud, AWS, and Azure. This role serves as the central reference point for all matters related to cloud privacy, data protection, defensive security, and secure solution design.</div><div>
Working side-by-side with architecture, development, and product teams, the Cybersecurity Operations expert ensures that all cloud-based products are designed and delivered following a rigorous <i>Privacy &amp; Security by Design</i> approach. The position includes responsibilities across threat modelling, internal security assessments, incident response, automation of controls, and continuous posture management.</div><div>
This is a senior, high-impact role within EWD&rsquo;s cloud platform domain.</div><div></div><div>
Jobs to Be Done:</div><div>
1. Define and govern EWD&rsquo;s cloud security framework:</div><ul><li>
Establish best practices for cloud security and privacy across all EWD products.</li><li>
Maintain and enhance the organization&rsquo;s cloud security posture.</li><li>
Develop policies, automated controls, and preventive guardrails across cloud environments.</li></ul><div></div><div>
2. Guide architecture and development teams:</div><ul><li>
Ensure Security by Design principles are applied throughout the full product lifecycle.</li><li>
Provide expert guidance, architectural reviews, and periodic internal audits.</li><li>
Contribute to secure architecture patterns, design decisions, and implementation strategies.</li></ul><div></div><div>
3. Perform continuous security evaluation:</div><ul><li>
Identify, analyze, and remediate vulnerabilities across projects.</li><li>
Conduct advanced threat modelling and risk assessments.</li><li>
Perform internal ethical hacking when needed to validate security controls.</li></ul><div></div><div>
4. Lead detection and incident response operations:</div><ul><li>
Design and implement logging, monitoring, and alerting strategies.</li><li>
Detect threats using native cloud security services.</li><li>
Lead incident response, recovery, and post-incident forensics.</li></ul><div></div><div>
5. Ensure governance, compliance, and architectural robustness</div><ul><li>
Ensure compliance with internal standards, regulatory requirements, and cloud benchmarks.</li><li>
Conduct architectural reviews to identify gaps and optimize cost&ndash;security&ndash;complexity trade-offs.</li><li>
Support centralized management of GCP projects, AWS accounts, and Azure subscriptions.</li></ul><div></div><div>
Requirements:</div><div></div><div>
Education:</div><ul><li>
Bachelor&rsquo;s degree in Computer Science, Engineering, or a related field.</li><li>
A Master&rsquo;s degree is a plus.</li></ul><div></div><div>
Experience:</div><ul><li>
More than 5 years of experience in cloud security, cloud engineering, or related roles.</li><li>
Extensive hands-on experience with Google Cloud and AWS; Azure experience is a plus.</li><li>
Proven track record implementing DevSecOps, security automation, CI/CD pipelines, and incident response.</li><li>
Previous experience in the energy or utilities sector is advantageous.</li></ul><div></div><div>
Skills and Competencies</div><div></div><div>
Cloud Security &amp; Privacy</div><ul><li>
Strong understanding of data classification, privacy, and protection mechanisms.</li><li>
Expertise in encryption (in transit and at rest), key management, and secret protection.</li><li>
Understanding of secure internet protocols and security operations.</li><li>
Ability to balance cost, security, and deployment complexity.</li><li>
Deep knowledge of the Cloud Shared Responsibility Model.</li></ul><div></div><div>
Identity &amp; Access Management</div><ul><li>
Experience designing and implementing authentication and authorization for cloud resources.</li><li>
Advanced familiarity with:</li><li>
(MUST) Google Cloud: IAM, IAM Conditions, Cloud Identity, Access Context Manager</li><li>
(NICE TO HAVE) AWS: Identity Center, Directory Service, IAM Roles, Permission Sets, Control Tower</li><li>
(NICE TO HAVE) Azure: Entra ID, Conditional Access, PIM, RBAC</li></ul><div></div><div>
Detection, Monitoring &amp; Incident Response</div><ul><li>
Proficiency with tools such as SCC, Chronicle, Cloud Logging &amp; Monitoring, GuardDuty, Security Hub, Inspector, Sentinel, Azure Monitor, etc. (at least one of them)</li><li>
Ability to design logging architectures, dashboarding, alerts, and anomaly detection.</li><li>
Strong incident response and threat-mitigation skills.</li></ul><div></div><div>
Network &amp; Application Security</div><ul><li>
Experience with edge and application protection (e.g. Cloud Armor, IAP, AWS WAF, AWS Network Firewall, Azure Front Door, etc.).</li><li>
Understanding of Zero-Trust principles and secure connectivity patterns.</li></ul><div></div><div>
Data Protection</div><ul><li>
Experience with tools such us Cloud KMS, Secret Manager, CMEK, AWS KMS/CloudHSM, Azure Key Vault, VPC-SC, DLP frameworks, and confidential computing (at least one of them).</li></ul><div></div><div>
Governance &amp; Compliance</div><ul><li>
Knowledge of posture management, CIS benchmarks, regulatory frameworks, SCPs, Assured Workloads, Blueprints, etc.</li><li>
Ability to perform end-to-end architecture reviews with a security focus.</li></ul><div></div><div>
Soft Skills</div><ul><li>
Structured and innovative mindset.</li><li>
Strong team spirit and relationship-building skills.</li><li>
Ability to manage complex situations with sound judgment.</li><li>
Resilience and composure under pressure.</li><li>
Entrepreneurial, proactive, and highly collaborative.</li></ul><div></div><div>
Key Performance Indicators (KPIs):</div><ul><li>
Compliance level with EWD&rsquo;s cloud security framework across all products.</li><li>
Reduction of vulnerabilities and security findings over time.</li><li>
Mean Time to Detect (MTTD) and Mean Time to Resolve (MTTR) for security incidents.</li><li>
Adoption rate of automated security controls across teams.</li><li>
Quality and frequency of internal security audits.</li><li>
Improvement of EWD&rsquo;s cloud security posture metrics (SCC scores, CIS benchmarks, etc.).</li></ul><div></div><div>
Why Join Us?</div><div>
At East-West Digital, you will help shape the security foundation of a next-generation, cloud-native platform serving real-world energy applications and global customers. You will work with cutting-edge cloud and AI technologies, drive high-impact decisions, and collaborate with multidisciplinary teams in a dynamic, multicultural environment.</div><div>
East-West Digital is building the future of digital energy solutions from Doha, and this role places you at the core of that transformation&mdash;combining innovation, technical excellence, and meaningful impact across the entire organization.</div><div></div><div>
Mobility Information</div><div>
Please note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country.</div><div></div><div>
Job Posting End Date:</div>
February-15-2026</div>

HSBC

<div><div><div><div><p>If you&rsquo;re looking for a career that will help you stand out, join HSBC and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.</p><p>
HSBC is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions.</p><p>
We are currently seeking an experienced professional to join our team in the role of Senior Consultant Specialist</p><p>
Emerging Technology, Innovation and Ventures Department at HSBC is dedicated to analyzing societal, financial, and technological trends that impact economic activity and the financial services industry. By leveraging this knowledge, we create innovative digital opportunities aligned with HSBC&rsquo;s business objectives. Our team of experts is at the forefront of research, innovation, and experimentation, utilizing the latest advancements to develop cutting-edge solutions that benefit our clients and the industry.
</p><p>In this role, you will:</p><ul><li><div><div><div><ul><li>
Integrate security practices into DevOps pipelines across the SDLC.</li><li>
Automate security testing in CI/CD pipelines using tools like SonarQube, Checkmarx, Snyk.</li><li>
Implement Infrastructure as Code (IaC) security with Terraform, AWS CloudFormation.</li><li>
Embed security controls into automated deployment workflows.</li><li>
Conduct security assessments of enterprise applications.</li><li>
Perform static/dynamic code analysis and runtime behavior assessments.</li><li>
Regularly scan for vulnerabilities and manage remediation.</li><li>
Evaluate third-party and open-source components for risk.</li><li>
Design secure architectures for enterprise applications.</li><li>
Create and maintain security reference architectures and design patterns.</li><li>
Evaluate and recommend tools and technologies to improve security posture.</li><li>
Address data protection, IAM, and secure communication in system designs.</li><li>
Perform in-depth threat modeling using STRIDE and similar methodologies.</li><li>
Use tools like Microsoft Threat Modeling Tool to analyze potential threats.</li><li>
Execute pen tests on systems to uncover vulnerabilities.</li><li>
Simulate adversarial attacks: data poisoning, evasion, prompt injection, etc.</li><li>
Use tools like CleverHans, SecML for adversarial robustness testing.</li><li>
Work closely with enterprise teams to fix vulnerabilities and harden models.</li></ul></div></div></div><div><div><div><p>
To be successful in this role, you should meet the following requirements:</p><ul><li>
5+ years in security engineering, including enterprise.</li><li>
1+ years in PQC and QKD experience is must.</li><li>
Strong Cloud Security and DevSecOps and Cryptography implementation background.</li><li>
Proven experience in security assessments, threat modeling, and pen testing.</li><li>
Solid experience designing secure full-stack application.</li><li>
Bachelor's or Master&rsquo;s degree in Computer Science, Cybersecurity, or related.</li><li>
Certifications: CISSP, CEH, OSCP.</li><li>
Bonus: Specialized AI/ML security certifications or training.</li><li>
Advanced proficiency with TensorFlow, PyTorch, and scikit learn; strong Python programming skills.</li><li>
Experience implementing adversarial attack and defense techniques (e.g., FGSM, PGD, DeepFool) and integrating robust optimization in model training.</li><li>
Experience in identifying and mitigating vulnerabilities, including prompt injection and data poisoning defenses.</li><li>
Solid understanding of MLOps tools (Kubeflow, MLflow) and secure CI/CD pipeline practices..</li><li>
Knowledge of legal and compliance standards relevant to security and data privacy.</li></ul></div></div></div>
.</li></ul></div></div></div><div><div><div><p>
www.hsbc.com/careers</p><p><br>
HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working, and opportunities to grow within an inclusive and diverse environment. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.</p><p>
Issued by &ndash; HSBC Software Development India.</p></div></div></div></div>

Post-Quantum Cryptography&Quantum Key Distribution(QKD) Engineer / Senior Consultant Specialist

BT Group

<div><div><div><div><div><h1 class="jobSectionHeader"><b>Data &amp; AI Security Operations Specialist
</b></h1></div></div></div></div><div><div><div><div>Job Req ID: 54566
</div></div></div></div><div><div><div><div>Posting Date: 30 Dec 2025
</div></div></div></div><div><div><div><div>Function: Data &amp; AI
</div></div></div></div><div><div><div><div>Unit: Digital
</div></div></div></div><div><div><div><div>Location:
RMZ Ecoworld, Devarabeesanahal, Bengaluru, India
</div></div></div></div><div><div><div><div>Salary: Competitive
</div></div></div></div><div></div><div><div><div><div><div><div><div><h2 class="jobSectionHeader"><b>Why this job matters</b></h2>
</div><div><p>
The Data and AI Delivery Unit is using innovative ways of leveraging BTs data such as AI and Machine Learning techniques to make better data driven decisions and to drive revenue in both our on-prem and Google Cloud Platform estates. As part of this ambition, it is key to deliver safely, secure the data at every stage.</p>
<p>
The data in GCP is a huge and valuable asset to BT and in response BT must develop, deploy and run key processes, measurements and capabilities to secure this data. This role is required to ensure the right defence mechanisms are in place and that these are effective within CDH/GCP and where necessary the wider BT estate.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
What you&rsquo;ll be doing</b></h2>
</div><div><ul><li>Must understand how to protect data BTs data in a cloud environment (GCP experience is preferred)</li></ul>
<ul><li>Must understand the role of data in relation to Business process and systems</li></ul>
<ul><li>Must classify the data and apply the appropriate controls</li></ul>
<ul><li>Is responsible for ensuring that data is protected appropriately whilst at rest and as part of its journey into and through GCP</li></ul>
<ul><li>Provides 2nd Line SecOps &ndash; working with the GCP Core SecOps Team to mitigate any identified risks</li></ul>
<ul><li>Runs the Security Guide, Trust, Verify Model to ensure empowerment of users whilst helping them to comply and checking to ensure they do. This will incorporate 1st Line Assurance - Accountable for ensuring the effectiveness of security controls as they apply in GCP</li></ul>
<ul><li>Provides guidance taking the squads from DevOps to a DevSecOps Model</li></ul>
<ul><li>Is responsible for the assessment of new code pipeline patterns to ensure there are no security risk such as the potential for sql injection</li></ul>
<ul><li>Creates a change network that builds consensus and momentum for change with join purpose, learning, decision making and accountability across different teams.</li></ul>
<ul><li>Provides clear communication and engagement plans with stakeholders</li></ul>
<ul><li>Ensure that the data is appropriately secured in the GCP estate based on how it will be used, who will have access to it etc</li></ul>
<ul><li>Scope of existing controls and if any new ones are needed and if so how this will be implemented.</li></ul></div></div><p></p><div><div><h2 class="jobSectionHeader"><b><br>
Skills and Experience Required</b></h2>
</div><div><p><b>
Skills Required:</b></p>
<ul><li>You will have a DevSecOps mindset, with security being job number one</li></ul>
<ul><li>Understanding Data and how to leverage its value in a safe way. Industries where this is key could be Banking or Telcos.</li></ul>
<ul><li>Excellent knowledge of Regulation and Industry Standards and Legislations, e.g. GDPR and PECR and applying the right controls to comply. Also</li></ul>
<ul><li>Expertise in applying the right security controls in an Analytics environment to ensure balance is maintained between securing the data and retaining the utility of the data. This will include techniques such as Encryption, Fine Grained Access Control, Tokenization and Retention</li></ul>
<ul><li>Stakeholder Management: Managing expectations and the level of stakeholder engagement. Ability to manage to complex political relationships in a variety of business and technical situations. Influence and engage with stakeholders in decisions based on analysis of their needs, interests and impact. Use empathy and the right language to avoid misunderstanding.</li></ul>
<ul><li>Security Experience: Experience is needed within several areas, such as Security Architecture, DevSecOPs and Vulnerability Scanning.</li></ul>
<ul><li>Problem Solving: Uses judgement &amp; experience to solve often highly complex and abstract problems across the domain, such as launching new products and services, solving customer experience problems. Includes defining and alignment to business strategy.</li></ul>
<ul><li>Automation: Have an eye for automation opportunities to save man hours and costs.</li></ul><br>
<p></p>
<p><b>
Experience you would be expected to have</b></p>
<ul><li>Technical Solutions: Demonstrates a breadth of technical acumen and commercial insight to determine how to solve problems through the use of technology and innovation including in Google Cloud Platform</li></ul>
<ul><li>Data Knowledge: How to get the best out of the data whilst ensuring its safety</li></ul>
<ul><li>Security Expert: Expert knowledge of IT Security policies, objectives, controls and remediations and significant experience in a senior IT Security role.</li></ul>
<ul><li>Customer Experience: Experience in understanding the fundamental customer experiences that drive NPS, customer satisfaction and churn.</li></ul>
<ul><li>Cloud and Security Certified: Experience of working in Cloud Environments. Cloud Security Certifications(CISSP) is preferred to have.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Our leadership standards</b></h2>
</div><div><p><b>
Looking in:</b><br>
<b>Leading inclusively and Safely</b><br>
I inspire and build trust through self-awareness, honesty and integrity.<br>
<b>Owning outcomes</b><br>
I take the right decisions that benefit the broader organisation.</p>
<p><b>Looking out:</b><br>
<b>Delivering for the customer</b><br>
I execute brilliantly on clear priorities that add value to our customers and the wider business.<br>
<b>Commercially savvy</b><br>
I demonstrate strong commercial focus, bringing an external perspective to decision-making.</p>
<p><b>Looking to the future:</b><br>
<b>Growth mindset</b><br>
I experiment and identify opportunities for growth for both myself and the organisation.<br>
<b>Building for the future</b><br>
I build diverse future-ready teams where all individuals can be at their best.</p></div></div></div><p><b>
About us</b></p>
<p>BT Group was the world&rsquo;s first telco and our heritage in the sector is unrivalled. As home to several of the UK&rsquo;s most recognised and cherished brands &ndash; BT, EE, Openreach and Plusnet, we have always played a critical role in creating the future, and we have reached an inflection point in the transformation of our business.<br>
<br>
Over the next two years, we will complete the UK&rsquo;s largest and most successful digital infrastructure project &ndash; connecting more than 25 million premises to full fibre broadband. Together with our heavy investment in 5G, we play a central role in revolutionising how people connect with each other.<br>
<br>
While we are through the most capital-intensive phase of our fibre investment, meaning we can reward our shareholders for their commitment and patience, we are absolutely focused on how we organise ourselves in the best way to serve our customers in the years to come. This includes radical simplification of systems, structures, and processes on a huge scale. Together with our application of AI and technology, we are on a path to creating the UK&rsquo;s best telco, reimagining the customer experience and relationship with one of this country&rsquo;s biggest infrastructure companies.<br>
<br>
Change on the scale we will all experience in the coming years is unprecedented. BT Group is committed to being the driving force behind improving connectivity for millions and there has never been a more exciting time to join a company and leadership team with the skills, experience, creativity, and passion to take this company into a new era.</p>
<p><b>A FEW POINTS TO NOTE:</b></p>
<p>Although these roles are listed as full-time, if you&rsquo;re a job share partnership, work reduced hours, or any other way of working flexibly, please still get in touch.</p>
<p>We will also offer reasonable adjustments for the selection process if required, so please do not hesitate to inform us.</p>
<p><b>DON'T MEET EVERY SINGLE REQUIREMENT?</b></p>
<p>Studies have shown that women and people who are disabled, LGBTQ+, neurodiverse or from ethnic minority backgrounds are less likely to apply for jobs unless they meet every single qualification and criteria. We're committed to building a diverse, inclusive, and authentic workplace where everyone can be their best, so if you're excited about this role but your past experience doesn't align perfectly with every requirement on the Job Description, please apply anyway - you may just be the right candidate for this or other roles in our wider team.</p></div></div></div></div></div><p></p>

Data & AI Security Operations Specialist

Search 10000+ Cloud security specialist jobs near you this January. New roles added regularly across leading industries. Apply today.

10000 cloud security specialist jobs NEAR_ME

Senior Cloud Security Engineer

Cloud Security Architect

Cloud Security Lead

Cybersecurity Operations

Cybersecurity Operations

Post-Quantum Cryptography&Quantum Key Distribution(QKD) Engineer / Senior Consultant Specialist

Data & AI Security Operations Specialist