Lead Security Engineer, Cloud Threat Hunting

What you'll do

• Embed secure-by-design principles into cloud architectures by partnering with product, engineering, and risk teams.
• Execute hypothesis-driven threat hunts to develop detection rules and alert tuning for cloud environments.
• Analyze large datasets using specialized tools to identify emerging risks and potential threats.
• Deliver threat models and risk-based assessments of cloud services to inform architectural decisions.
• Perform security reviews of infrastructure-as-code to ensure alignment with firm standards.
• Develop preventive and detective controls to enforce security requirements at an enterprise scale.
• Integrate platform capabilities with security operations, threat intelligence, and incident response playbooks.
• Provide expert guidance on the cloud threat landscape and adversary tradecraft to inform strategic decisions.

What we're looking for

• Formal training or certification in cybersecurity concepts and 5+ years of applied experience (e.g., Security+, CEH, CCSP, CISSP).
• Hands-on cloud-native experience across one or more major platforms (AWS, Azure, or Google Cloud) including a relevant cloud security certification.
• Demonstrated experience with threat modeling methodologies and delivering risk-based security assessments.
• Experience with cloud security posture management tooling such as Wiz, Prisma Cloud, CrowdStrike Falcon, or equivalent.
• Knowledge of infrastructure-as-code frameworks (e.g., Terraform, CloudFormation) and their security implications.
• Ability to lead cross-functional security initiatives and drive outcomes without direct authority.
• Experience in offensive security disciplines including penetration testing, red teaming, or purple teaming (preferred).
• Proficiency with at least one query language for threat detection (e.g., KQL, Splunk SPL, or SQL) across large datasets (preferred).