Senior Cloud Security Consultant
Core
Senior Cloud Security Consultant leading technical cloud security reviews, due diligence, and risk assessments for private equity and corporate clients across Azure and AWS environments.
Role type
Senior IC cloud security consultant (advisory)
Builds
Cyber due diligence reports, technical cyber reviews, cloud security posture assessments, and remediation roadmaps for investors and C-suite executives.
Domain
Professional services / Cybersecurity / Cloud Infrastructure
Deliverable
client delivery
Required skills
Microsoft Azure security architecture, Amazon Web Services (AWS) security architecture, Identity and Access Management (IAM), Cloud Security Posture Management (CSPM), Network security and segmentation, Encryption and key management, Logging and monitoring (SIEM/SOC integration), Infrastructure-as-Code (IaC), DevSecOps practices, Cloud attack path analysis, Technical report writing for non-technical stakeholders.
Preferred skills
Experience with Kubernetes security (AKS/EKS), Familiarity with frameworks (CIS Benchmarks, NIST CSF, ISO 27001), Experience with cloud backup and disaster recovery.
Technologies
Microsoft Azure, Amazon Web Services (AWS), Microsoft Entra ID, AWS IAM, Azure Policy, AWS Organizations, Microsoft Defender for Cloud, AWS Security Hub, GuardDuty, Azure Monitor, Microsoft Sentinel, AWS CloudTrail, Terraform, Bicep, ARM, CloudFormation, PowerShell, Azure CLI, AWS CLI, KQL.
Responsibilities
Leading technical cloud security reviews of Azure and AWS environments as part of cyber due diligence; Assessing cloud tenancy and account architecture; Reviewing identity and access management across cloud and hybrid environments; Evaluating cloud network architecture and segmentation; Assessing cloud security configuration and posture using native and third-party tooling; Reviewing data protection controls; Assessing logging, monitoring and detection capabilities; Reviewing infrastructure-as-code and DevSecOps practices; Translating technical findings into prioritised, commercially relevant risks and remediation roadmaps; Producing high-quality reports, presentations and executive briefings; Managing technical workstreams and supporting engagement delivery across multiple concurrent projects.
Seniority
Senior, hands-on IC
