Sr. Consultant, Surface Area Management

Lead enterprise-wide cloud vulnerability management programs across AWS, Azure, GCP, and OCI, ensuring continuous improvement of security controls and remediation of cloud exposures.

Design and implement preventive cloud security guardrails using policy-as-code technologies to enforce secure-by-default postures at scale.

Drive remediation accountability, risk acceptance governance, and deliver executive-level risk reporting while leading cloud identity and access security initiatives.

Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Information Systems, or related technical field, or equivalent practical experience.

6+ years cybersecurity experience with 4+ years focused on cloud security engineering, vulnerability or attack surface management.

Hands-on experience with enterprise-scale vulnerability management on at least one major cloud platform (AWS, Azure, GCP, OCI) and working knowledge of a second cloud provider.

Proven capability designing and operating preventive cloud guardrails (e.g., SCPs, Azure Policy) and experience with CSPM/CNAPP tools and cloud-native security controls.

Technical leader and subject matter expert in cloud vulnerability and exposure management, comfortable driving cross-functional security improvements at scale.

Experienced in cloud security architecture, identity and access management including least privilege and Zero Trust implementations.

Able to translate complex cloud risks into prioritized remediations and communicate effectively to senior leadership and technical teams.