Cyber Security - Cloud Security Senior Associate

Line of Service Advisory Industry/Sector Technology Specialism Advisory - Other Management Level Senior Associate Job Description & Summary Our Cloud and Infrastructure Security team helps organizations design and operate cloud environments that remain secure as applications, data and business processes increasingly move to the cloud. We help clients answer questions such as: Is our cloud architecture secure by design? Are security controls implemented consistently across environments? How do we detect and respond to threats? And how can development teams adopt cloud services without introducing unnecessary risk? As a Senior Associate, you will take ownership of cloud security workstreams, assess existing environments, design security controls and help clients implement improvements across cloud platforms and cloud-native technologies. Core Activities: What You ll Be Working On Design cloud security architectures and secure landing zones across Azure, AWS and multi-cloud estates, integrating identity, network, data protection, logging andCNAPP/CSPM/CWPP controls. Engineer Microsoft Defender XDR and Sentinel detections, automation rules, SOAR playbooks and data-ingestion architecture. Implement enterprise Microsoft Purview DLP, DSPM, Information Protection and insider-risk capability, including labelling taxonomies and rollout planning. Lead Kubernetes and container security hardening - admission control, image scanning, runtime protection and network policy. Run risk-based vulnerability management across cloud and on-premises infrastructure, with SLAs, exception handling and executive reporting. Assess and harden hybrid infrastructure - OS baselines, network segmentation, firewall/WAF configuration and EDR coverage. Design identity-centric cloud controls - Entra ID Conditional Access, PIM, workload identities and least-privilege entitlement models. Lead client workshops, architecture reviews and posture-improvement roadmaps mapped to CIS, NIST CSF and cloud benchmarks. Own technical workstreams, quality-assure deliverables and coach graduates and analysts on the team Knowledge Exposure: What you'll build expertise in As a Senior Associate, you will deepen your expertise in cloud and infrastructure security architecture and engineering while taking greater ownership of client delivery. You will learn to design security controls, assess complex multi-cloud and hybrid environments, embed security into cloud delivery processes and guide clients from identified weaknesses toward practical remediation.

Skills

• What candidates need to have Typically 3 6 years of relevant experience in cloud security, infrastructure security, security engineering or related technology areas
• Azure Security, AWS Security and Infrastructure Security - architecture, network security, encryption and secure landing-zone design
• CSPM, CWPP and CNAPP platforms - Microsoft Defender for Cloud, Wiz, Prisma Cloud - deployment, tuning and posture remediation
• Microsoft Defender XDR, Microsoft Sentinel, Microsoft Intune and Entra ID - detection engineering, KQL, automation and device/identity controls
• Microsoft Purview, Cyera and Varonis - DSPM, DLP, data classification and Information Protection at enterprise scale
• Kubernetes and container security - AKS/EKS hardening, admission controllers, image supply chain and runtime threat detection
• Infrastructure and vulnerability management - network security, firewalls, server/OS hardening and risk-based prioritization
• Automation and IaC skills (Terraform, Bicep, PowerShell, Python) to deploy and maintain controls repeatably
• Ability to lead client-facing technical discussions and translate posture findings into prioritized, costed remediation plans
• Certifications: SC-500, SC-200, AWS Certified Security Specialty, CCSK or CCSP, CKS; CCNP Security or CySA+ for infrastructure