Cloud Security Lead: Attack Surface & Risk

Boston Consulting Group; Lisboa; On-site; EUR 70,000 - 110,000; Full time

Job summary

Boston Consulting Group seeks a seasoned Cloud Security professional to join the Security Operations team in Lisbon. You will lead cloud security assessments across AWS, Azure, and Google Cloud, working with senior security and engineering leaders to prioritize risks and strengthen BCG's cloud security posture.

You will investigate vulnerabilities, develop practical remediation recommendations, and help evolve cloud security processes and automation across the organization.

Qualifications

• 6-8 years of information security experience with hands-on cloud security.
• Experience with AWS, Azure, or Google Cloud.
• Foundational knowledge of cloud security posture management tools (Wiz or Prisma Cloud).
• Ability to independently assess complex cloud vulnerabilities and misconfigurations.
• Experience evaluating cloud architecture, IAM, and network security risks.
• Strong analytical judgment and communication skills.

Responsibilities

• Independently own complex cloud security assessments and remediation priorities.
• Analyze exposure, exploitability, access permissions, and affected assets to inform prioritization.
• Develop evidence-based risk assessments and remediation recommendations with senior leaders.
• Investigate cloud security issues and collaborate with engineering teams for remediation.
• Track remediation progress and validate outcomes with cross-functional teams.
• Share findings and guidance to promote consistent security practices.

Skills

Cloud security understanding

Vulnerability assessment

Risk prioritization

Stakeholder communication

Tools

Wiz

Prisma Cloud

Job description

Boston Consulting Group seeks a seasoned Cloud Security professional to join the Security Operations team in Lisbon. You will lead cloud security assessments across AWS, Azure, and Google Cloud, working with senior security and engineering leaders to prioritize risks and strengthen BCG's cloud security posture.

You will investigate vulnerabilities, develop practical remediation recommendations, and help evolve cloud security processes and automation across the organization.