Job Title: Cloud Security Posture Management (CSPM) SME

Location: Remote

About the Role:

Our client is seeking a highly experienced CSPM Subject Matter Expert (SME) to lead the development and execution of a comprehensive cloud security posture strategy. The CSPM SME will define and implement a CSPM managed security service (MSS), provide best practice guidance for securing cloud environments, and build a cloud security team to ensure proactive configuration compliance, threat detection, and risk management.

The role requires deep expertise in multi-cloud platforms (AWS, Azure, GCP) and cloud security frameworks. The SME will improve security visibility, reduce risks, and ensure adherence to industry standards and regulatory requirements.

Key Responsibilities:

Service Definition & Strategy : Define the CSPM service, including objectives, SLAs, and KPIs, and maintain a CSPM roadmap aligned with business goals.
Cloud Security Leadership : Lead security efforts across AWS, Azure, and GCP, focusing on governance, risk, compliance, and technical controls. Conduct posture assessments and implement best practices.
Team Formation & Leadership : Define team structure, hire and mentor cloud security professionals, and foster collaboration and continuous improvement.
Risk Management & Compliance : Ensure alignment with compliance frameworks (ISO 27001, NIST, GDPR), develop security policies, and manage cloud vulnerabilities and misconfigurations.
Automation & Optimization : Implement security automation to reduce manual efforts and leverage CSPM tools (e.g., Prisma Cloud, AWS Security Hub) for threat detection and response.
Cross-Functional Collaboration : Work closely with senior stakeholders (CTO, CIO, CISO) to align cloud security initiatives with broader company goals, and provide guidance to engineering and security teams.

Key Qualifications:

Experience : 5+ years in cloud security, 3+ years in CSPM roles; securing AWS, Azure, and Google Cloud environments.
Technical Skills : Expertise in cloud security frameworks (e.g., NIST, CIS), hands-on experience with CSPM tools (e.g., Prisma Cloud, Wiz), and proficiency in cloud automation and DevSecOps.
Leadership & Communication : Proven ability to lead teams, influence stakeholders, and communicate complex security concepts to diverse audiences.

Desirable Certifications : CISSP, CCSP, AWS Certified Security, Azure Security Engineer, Google Cloud Professional Security Engineer.

TalentHawk jobs

Cloud Security SME