Senior Cloud Security Analyst & DevSecOps Strategist

McKinsey & Company, Inc.; City of Westminster; On-site; GBP 90,000 - 130,000; Full time

Job summary

McKinsey & Company, Inc. is seeking a security professional to act as a point of contact for the SHaPE Practice within the Tech Ecosystem. You will promote the Secure Development Lifecycle, DevSecOps, and cloud security policies while contributing to the security strategy and leadership reporting.

You will drive reporting on compliance, incidents, KPIs, and OKRs, helping shape priorities for Tech Ecosystem leadership and enabling growth in a high-performance environment.

Qualifications

• BSc/MSc in Information Security, Computer Science or other technical discipline.
• 3+ years of experience in a similar information security role.
• Working experience with cloud offerings such as AWS, Databricks, etc.
• Knowledge of enterprise IT and cloud-based architectures and technologies (networking, servers, OS, web apps, databases, containers, mobile).
• Expertise defining system boundaries and security/compliance/infrastructure support services.
• Understanding of security/privacy frameworks (GDPR, NIST SP800-53, ISO 27001, NIST CSF).
• Experience evaluating logging for SIEM and continuous monitoring.
• Experience with security tools: vulnerability scanners, firewalls, network monitors, IAM, SIEM, IDS/IPS.
• Knowledge of Secure SDLC and DevSecOps

Responsibilities

• Serve as security point of contact for McKinsey’s SHaPE Practice with support from Tech Ecosystem.
• Promote the Secure Development Lifecycle, DevSecOps and Cloud security policies.
• Contribute to development and continual improvement of the Tech Ecosystem security strategy.
• Provide reporting on security compliance, incidents, KPIs and OKRs.
• Represent the Practice priorities to Tech Ecosystem Leadership.

Skills

3+ years exp

Cloud security

SIEM logging

DevSecOps

Compliance knowledge

Vulnerability scanners

IAM

Network security

Education

BSc/MSc in Information Security/Computer Science

Tools

AWS

Databricks

Job description

McKinsey & Company, Inc. is seeking a security professional to act as a point of contact for the SHaPE Practice within the Tech Ecosystem. You will promote the Secure Development Lifecycle, DevSecOps, and cloud security policies while contributing to the security strategy and leadership reporting.

You will drive reporting on compliance, incidents, KPIs, and OKRs, helping shape priorities for Tech Ecosystem leadership and enabling growth in a high-performance environment.