Line of Service

Advisory

Industry/Sector

Technology

Specialism

Advisory - Other

Management Level

Senior Associate

Job Description & Summary

Our Cloud and Infrastructure Security team helps organizations design and operate cloud environments that remain secure as applications, data and business processes increasingly move to the cloud.​
​
We help clients answer questions such as: Is our cloud architecture secure by design? Are security controls implemented consistently across environments? How do we detect and respond to threats? And how can development teams adopt cloud services without introducing unnecessary risk?​
​
As a Senior Associate, you will take ownership of cloud security workstreams, assess existing environments, design security controls and help clients implement improvements across cloud platforms and cloud-native technologies.

Core Activities: “What You’ll Be Working On”

Design cloud security architectures and secure landing zones across Azure, AWS and multi-cloud estates, integrating identity, network, data protection, logging andCNAPP/CSPM/CWPP controls.​

• Engineer Microsoft Defender XDR and Sentinel detections, automation rules, SOAR playbooks and data-ingestion architecture.​
• Implement enterprise Microsoft Purview DLP, DSPM, Information Protection and insider-risk capability, including labelling taxonomies and rollout planning.​
• Lead Kubernetes and container security hardening - admission control, image scanning, runtime protection and network policy.​
• Run risk-based vulnerability management across cloud and on-premises infrastructure, with SLAs, exception handling and executive reporting.​
• Assess and harden hybrid infrastructure - OS baselines, network segmentation, firewall/WAF configuration and EDR coverage.​
• Design identity-centric cloud controls - Entra ID Conditional Access, PIM, workload identities and least-privilege entitlement models.​
• Lead client workshops, architecture reviews and posture-improvement roadmaps mapped to CIS, NIST CSF and cloud benchmarks.​
• Own technical workstreams, quality-assure deliverables and coach graduates and analysts on the team

 

Key Skills: “What you need candidates need to have”​

Typically 3–6 years of relevant experience in cloud security, infrastructure security, security engineering or related technology areas.​

• Azure Security, AWS Security and Infrastructure Security - architecture, network security, encryption and secure landing-zone design.​
• CSPM, CWPP and CNAPP platforms - Microsoft Defender for Cloud, Wiz, Prisma Cloud - deployment, tuning and posture remediation.​
• Microsoft Defender XDR, Microsoft Sentinel, Microsoft Intune and Entra ID - detection engineering, KQL, automation and device/identity controls.​
• Microsoft Purview, Cyera and Varonis - DSPM, DLP, data classification and Information Protection at enterprise scale.​
• Kubernetes and container security - AKS/EKS hardening, admission controllers, image supply chain and runtime threat detection.​
• Infrastructure and vulnerability management - network security, firewalls, server/OS hardening and risk-based prioritization.​
• Automation and IaC skills (Terraform, Bicep, PowerShell, Python) to deploy and maintain controls repeatably.​
• Ability to lead client-facing technical discussions and translate posture findings into prioritized, costed remediation plans.​
• Certifications: SC-500, SC-200, AWS Certified Security – Specialty, CCSK or CCSP, CKS; CCNP Security or CySA+ for infrastructure.​

 

Knowledge Exposure: “What you'll build expertise in”​

As a Senior Associate, you will deepen your expertise in cloud and infrastructure security architecture and engineering while taking greater ownership of client delivery. You will learn to design security controls, assess complex multi-cloud and hybrid environments, embed security into cloud delivery processes and guide clients from identified weaknesses toward practical remediation.​

Education (if blank, degree and/or field of study not specified)

Degrees/Field of Study required:

Degrees/Field of Study preferred:

Certifications (if blank, certifications not specified)

Required Skills

Optional Skills

Accepting Feedback, Accepting Feedback, Active Listening, AI Fluency, AI-Human Collaboration, Analytical Thinking, Cloud Administration, Cloud Engineering, Cloud Infrastructure, Cloud Infrastructure Architecture Design, Cloud Resource Management, Cloud Security, Cloud Security Auditing, Cloud Service Delivery, Cloud Service Level Risk Management, Communication, Creativity, Cyber Engineering, Digital Tooling, Embracing Change, Emotional Regulation, Empathy, Forensic Investigation, Incident Investigation, Inclusion {+ 22 more}

Desired Languages (If blank, desired languages not specified)

Travel Requirements

Not Specified

Available for Work Visa Sponsorship?

Yes

Government Clearance Required?

No

Job Posting End Date

October 19, 2027