Implement Security-as-Code and Policy-as-Code frameworks.
Automate compliance validation and security posture assessments.
Establish secure software supply chain controls.
Drive secure container, Kubernetes, and serverless security practices.
Integrate automated vulnerability and misconfiguration detection into engineering workflows.
Security Operations & Threat Management
Define and oversee cloud security monitoring, detection, and response capabilities.
Establish multi-cloud threat detection strategies.
Lead security incident response and forensic investigations.
Drive vulnerability management programs across cloud platforms.
Implement cloud-native threat intelligence and proactive threat hunting capabilities.
Develop operational runbooks and security response automation.
Governance, Risk & Compliance
Develop cloud security governance frameworks and policies.
Establish cloud risk management and control assessment processes.
Lead compliance initiatives including
ISO 27001
SOC 2
PCI DSS
GDPR
HIPAA
NIST CSF
CIS Benchmarks
Support customer security reviews and regulatory audits.
Build continuous compliance monitoring capabilities.
Identity, Access & Data Security
Define enterprise IAM strategy across AWS, Azure, and GCP.
Implement Zero Trust and least-privilege access models.
Standardize
MFA
SSO
Federated Identity
Privileged Access Management
Lead secrets management and encryption strategy.
Define enterprise data classification and protection controls.
AI & Emerging Security
Secure GenAI and AI/ML platforms deployed in cloud environments.
Establish governance controls for AI workloads.
Define security standards for LLM deployments and AI-assisted operations.
Assess risks associated with AI services and third-party integrations.
Collaborate with AI engineering teams to implement secure AI architectures.
Leadership & Organizational Responsibilities
Build and lead a Cloud Security Center of Excellence within SRE.
Mentor Cloud Security Engineers and Security Analysts.
Partner with Strategic Account Directors, TAMs, Cloud Architects, and Delivery Leaders.
Provide executive-level reporting on security posture, risks, and remediation plans.
Support customer-facing security discussions and solution reviews.
Required Qualifications
12–15+ years of experience in Infrastructure, Cloud, Security, or SRE domains.
Minimum 7+ years of cloud security experience.
Minimum 3+ years leading cloud security teams or programs.
Hands-on expertise across AWS, Azure, and GCP.
Strong understanding of
Cloud-native architectures
Kubernetes
DevSecOps
Identity Security
Compliance frameworks
Security Operations
Experience supporting enterprise-scale SaaS environments.
Strong customer-facing and consulting capabilities.
Preferred Certifications
AWS Certified Security – Specialty
AWS Solutions Architect Professional
Microsoft Certified: Cybersecurity Architect Expert
Google Professional Cloud Security Engineer
CISSP
CCSP
CISM
CKS (Certified Kubernetes Security Specialist)
Success Metrics (KPIs)
Reduction in critical cloud security findings.
Cloud Security Posture Management (CSPM) score improvement.
Compliance audit pass rates.
Security incident reduction.
MTTD and MTTR improvements.
Percentage of infrastructure compliant by default.
Vulnerability remediation SLA adherence.
Customer security audit success rate.
Security automation coverage across cloud platforms.
Reporting Structure
Reports To: Delivery Leader
Manages: Cloud Security Engineers, Security Analysts, DevSecOps Engineers, Security Compliance Specialists
This role becomes the security pillar leader within the SRE organization, alongside leaders for Cloud Operations, FinOps, Platform Engineering, Observability, and Automation, ensuring secure and compliant operations across AWS, Azure, and GCP customer environments.
