Locations: Chandler, AZ / Charlotte, NC / Dallas, TX / Irving, TX - hybrid MUST BE IN THE OFFICE 3 days per week

This position will support Cloud Security Benchmark tasks specific to developing/documenting codifiable cloud security control parameters for Azure and Google Cloud Platform platforms/services. Candidates for this role will have experience with Information Security industry and government standard frameworks, as well as having experience navigating and working with Cloud Service Provider platforms and associated services and controls (Azure and/or Google).

Candidates for this role will:

• Leverage understanding of industry benchmarks and control requirements to document security baselines for client platforms/services.
• Interact with cloud engineers to understand, verify, and document benchmark implementation approaches.
• Support engineering teams in the development of Policy as Code (PaC) for adherence to documented security baselines.
• Be a motivated self-starter, quick to adapt and stay focused on delivering results in a fast-paced environment with aggressive deadlines.
• Work effectively with a virtual Team consisting of members across various locations in the U.S. and India.

Required

• 5 years of Information/Cybersecurity experience
• 3 years of intermediate to advanced experience with public cloud computing/hosting (preferably Microsoft Azure and/or Google) - cloud native capabilities, cloud platforms and cloud services.
• Experience documenting and/or implementing security baselines such as (CIS Benchmarks, Microsoft Cloud Security Benchmarks, etc.)
• Experience with cloud migrations
• Experience with Agile Scrum or Kanban methodologies
• Understanding and ability to apply knowledge of industry/government standards and frameworks to real world business and technical requirements (e.g. NIST, CIS, CSA, FFIEC, ISO)
• Strong analytical skills, proven critical thinking capabilities and ability to solve complex problems with minimal direct oversight
• Ability to handle multiple, high priority deliverables concurrently
• Ability to communicate confidentially, professionally, and effectively, in both written and verbal formats, with stakeholders and partners
• Intermediate to advanced experience working with Microsoft Office products (e.g. Word, Excel, PowerPoint, Visio, Outlook, MS Teams, SharePoint).

Desired

• Cloud Security knowledge of platform, service and workload hardening practices
• Experience with documenting/implementing security requirements for SaaS services.
• Knowledge/experience with scripting/automation languages such as Terraform, Python and/or PowerShell
• Experience with Infrastructure as Code (IaC) and/or Policy as Code (PaC) concepts/tools
• Microsoft Azure and/or Google Cloud Certifications
• Understanding of cybersecurity threats, trends and industry best practices and security tools
• Experience operating in a highly regulated industry (e.g., finance, health care, government)

EEO:

Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.