Cloud Security Ops Lead | CNAPP & Attack Surface

The Boston Consulting Group GmbH; Lisboa; Presencial; EUR 90 000 - 140 000; Tempo integral

Resumo da oferta

Boston Consulting Group is seeking a senior cloud security professional to join the Security Operations team. You will protect BCG’s multi-cloud environment by leading cloud security posture operations and translating findings into clear risk narratives.

You will work across AWS, Azure, and Google Cloud, evaluating exploitability and guiding remediation with engineering and platform teams. This role emphasizes shift-left security and automation to reduce misconfigurations.

Qualificações

• 6–8 years in information security with cloud security focus.
• Hands-on CNAPP experience across triage, posture reporting, and policy tuning.
• Deep knowledge of AWS, Azure, and Google Cloud security controls.
• Practical understanding of AI workload security and LLMOps risk.
• Experience driving remediation across engineering and platform teams.
• Scripting or automation experience (Python/Bash) to support scale.

Responsabilidades

• Lead triage, risk assessment, and response decisions across CNAPP capabilities.
• Assess cloud findings in context and prioritize remediation by risk.
• Use attack path analysis to identify critical exposure paths.
• Monitor vulnerability exposure across cloud workloads and prioritize fixes.
• Translate complex issues into actionable remediation guidance for varied teams.
• Embed guardrails into CI/CD and IaC controls to reduce misconfigurations.
• Build automation, detection logic, runbooks, and CNAPP policy inputs.
• Collaborate with cloud engineers, security architects, and DevSecOps teams.

Conhecimentos

CNAPP security

Cloud security operations

Threat assessment & risk modeling

Automation & scripting (Python/Bash/AP

Formação académica

Bachelor's degree in Computer Science or related field

Ferramentas

AWS

Azure

Google Cloud

CI/CD security tooling

Descrição da oferta de emprego

Boston Consulting Group is seeking a senior cloud security professional to join the Security Operations team. You will protect BCG’s multi-cloud environment by leading cloud security posture operations and translating findings into clear risk narratives.

You will work across AWS, Azure, and Google Cloud, evaluating exploitability and guiding remediation with engineering and platform teams. This role emphasizes shift-left security and automation to reduce misconfigurations.