Lead Security Engineer, Cloud Threat Hunting

What you'll do

• Recommend security implementations across cloud architectures to ensure secure-by-design principles are embedded throughout.
• Execute hypothesis-driven cloud threat hunts and translate findings into detection rules and alert tuning.
• Analyze large datasets using specialized tooling to identify potential threats and emerging risk patterns.
• Deliver threat models and risk-based assessments of cloud services to inform engineering decisions.
• Perform security reviews of infrastructure-as-code to ensure alignment with firm standards and best practices.
• Develop preventive and detective controls to enforce security requirements across cloud environments at scale.
• Operationalize detections and improve triage playbooks by interfacing with security operations and incident response teams.
• Provide expert guidance on the cloud threat landscape and adversary tradecraft to inform strategic decisions.

What we're looking for

• Formal training or certification in cybersecurity concepts and 5+ years of applied experience.
• Hands-on experience with one or more major cloud platforms (AWS, Azure, or Google Cloud) and a relevant cloud security certification.
• Demonstrated experience with threat modeling methodologies and delivering risk-based security assessments.
• Experience with cloud security posture management tooling such as Wiz, Prisma Cloud, or CrowdStrike Falcon.
• Knowledge of infrastructure-as-code frameworks like Terraform or CloudFormation and their security implications.
• Ability to lead cross-functional security initiatives and drive outcomes without direct authority.
• Experience in offensive security disciplines including penetration testing, red teaming, or purple teaming (preferred).
• Proficiency with at least one query language for threat detection (e.g., KQL, Splunk SPL, or SQL) (preferred).