Cloud security specialist

- Act as a subject matter expert (SME) for cloud security within the Security Operations Department - Collaborate with IT teams to develop and implement an integrated IT Strategy that aligns with firm objectives - Provide security guidance and support for IT projects as a Cloud Security SME - Research and assess new security products and services to ensure access to industry-leading tools and solutions - Implement and enhance detection and response workflows in cloud-native/hybrid environments - Monitor, investigate, and triage cloud security alerts generated by SIEM and cloud-native tools - Work alongside cloud operations and infrastructure teams to uphold secure architectural standards - Create and update cloud-focused detection rules and playbooks in collaboration with incident response teams - Assist in investigations and conduct threat hunting activities within environments - Review cloud logs for security analysis - Aid compliance initiatives through evidence collection, control validation, and reporting - Participate in security evaluations for existing integrations and new services - Investigate and address security incidents escalated from the Security Operations Center (SOC) - Assist in implementing cloud workflows utilizing Lambda and Step functions to facilitate cloud incident responses - Ensure that incident response efforts and documentation comply with industry regulations and standards such as GDPR, SOC, NIST, and ISO - Maintain thorough documentation and reporting for audits and compliance assessments - Refine incident response standard operating procedures and playbooks through continuous improvement - Conduct root cause analyses and post-incident assessments to identify improvement opportunities - Recommend and implement enhancements to detection, response, and recovery procedures - Operate and uphold controls associated with SIEM, DLP, Vulnerability Management, Cyber Threat Intelligence, and Endpoint Protection with a cloud focus - Execute IT Security risk assessments for high-impact projects and define necessary security controls to protect technology architectures, service providers, and business partners - Revise IT Security procedures to reflect best practices and mitigate existing and emerging threats - Build and maintain relationships with third-party IT security vendors and strategic allies