Cloud Security Lead – GCP & Vulnerability Management

Jobtailor; Colorado; On-site; USD 140,000 - 180,000; Full time

Job summary

Jobtailor is seeking a cloud security leader to assess, design, and implement vulnerability management across cloud platforms in a regulated banking environment. The role ensures alignment with global information security policies and risk-based controls across Aqua, Wiz, Qualys, and CrowdStrike products.

The candidate will guide engineers, mentor team members, and adapt testing to evolving threats while collaborating with stakeholders and regulators.

Qualifications

• 3+ years understanding of Google GCP native services, tools, and architecture.
• Understanding of cloud security principles and practice.
• Working knowledge of cloud threat landscape.
• Technical experience in infrastructure and/or security functions.
• Understanding of DevSecOps and CI/CD pipeline integration through security engineering lifecycles.
• Understanding of threat modeling and frameworks.
• Understanding of vulnerability management and scanning tools.
• Experience in project management.
• Well-developed analytic, qualitative, and quantitative reasoning skills with demonstrated creative problem-solving ability.
• Ability to work independently with little oversight on complex initiatives.
• Ability to communicate complex concepts to all levels of understanding and technical ability.
• Desirable: CISSP/CCSP/CISM; Desirable: Cloud certifications (SANS/GIAC)
• Desirable: Vendor certifications; Desirable: Bachelor's degree in a technical field.

Responsibilities

• Assess the bank's technologies, applications, and security controls in cloud platforms to identify risks and vulnerabilities.
• Understand and comply with the Bank’s Global Information Security policy and cybersecurity threats.
• Provide expert technical guidance to support partners.
• Adapt testing methods to evolving cybersecurity regulations and threats.
• Develop others on the team.
• Improve vulnerability identification quality control for the cloud environment and collaborate across Vulnerability Management.
• Align strategy and roadmaps across Cloud Security and related controls.
• Perform gap analysis and formulate recommendations with action plans.
• Provide consulting as a cloud vulnerability identification SME.
• Evaluate new technologies for cloud vulnerability management integration.
• Support audit and regulatory inquiries.
• Guide engineering staff in solving complex challenges.
• Lead efforts to identify vulnerabilities and misconfigurations in cloud platforms/workloads.
• Manage daily operations of Aqua, Wiz, Qualys, and CrowdStrike.
• Enhance vulnerability identification processes for hybrid clouds.
• Drive cloud security solutions in line with cloud strategy and best practices.
• Implement and improve proactive security controls to prevent external threats.
• Research and provide leadership updates on advanced threats.
• Monitor new threats and attempts to compromise controls.
• Develop partnerships by demonstrating operational expertise as SME.

Skills

Cloud Security

Vulnerability Mgmt

DevSecOps

GCP

Threat Modeling

CI/CD Security

Communication

Project Mgmt

Analytical Reasoning

Risk Assessment

Education

Bachelor's degree

Tools

Aqua

Wiz

Qualys

CrowdStrike

Job description

Jobtailor is seeking a cloud security leader to assess, design, and implement vulnerability management across cloud platforms in a regulated banking environment. The role ensures alignment with global information security policies and risk-based controls across Aqua, Wiz, Qualys, and CrowdStrike products.

The candidate will guide engineers, mentor team members, and adapt testing to evolving threats while collaborating with stakeholders and regulators.