Duties and Responsibilities :

- Eight or more years of progressive information security experience, including four to six years of direct, hands-on cloud security experience.

- Production experience operating a cloud security posture management platform or cloud-native application protection platform.

- Hands-on experience across at least two major cloud platforms.

- Cloud platform and security knowledge sufficient to interpret and prioritize cloud security posture management findings without guidance.

- Experience with cloud security policy enforcement, including guardrails, baseline controls, or policy as code in a live environment.

- Security operations experience, including alert triage, event investigation, and incident response.

- Experience working alongside engineering or development teams as a security partner.

- Clear written communication skills across technical and nontechnical audiences.

- Highly self-motivated and directed.

Preferred Experience :

- Experience with Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP).

- Kubernetes and container security experience.

- Shift-left experience, including Infrastructure as Code pipeline security, predeployment misconfiguration checks, or continuous integration/continuous delivery (CI/CD)-integrated security controls.

- Knowledge of common information technology regulatory compliance requirements associated with any of the following: Health Insurance Portability and Accountability Act (HIPAA), Health Information Technology for Economic and Clinical Health Act (HITECH), ISO 27001/27002, System and Organization Controls (SOC) 1/2, Sarbanes-Oxley Act (SOX), Payment Card Industry (PCI) requirements, and security best practices and procedures.