• Conduct deep technical research to discover and report novel risks and attack vectors specific to modern cloud- and AI-native architectures and systems. • Discover and articulate the highest unaddressed risk areas, working with Product and Engineering teams to translate research into product capabilities. • Define necessary foundational product capabilities by delivering both compelling proofs of risk (demonstrating impact) and technical POCs (showing how to solve it). • Work closely with Product and Engineering teams to ensure comprehensive risk coverage and support the investigation of new and complex product scope.

This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more. Role Description Are you ready to elevate your cybersecurity career to new heights while enjoying the flexibility of remote work? We are seeking an experienced Cloud Security Consultant with a specialized focus on Microsoft Azure, Microsoft 365 (M365), Entra ID, Sentinel, and the Defender suite of products. - Conduct in-depth security assessments across Azure, M365, Entra ID, and AWS environments. - Design and implement secure cloud architectures tailored to clients’ specific business needs. - Detect and remediate vulnerabilities within cloud security architectures. - Assess, design, and implement data classification and Data Loss Prevention (DLP) strategies. - Develop and execute cloud-focused threat simulations to evaluate clients’ defenses. - Prepare comprehensive reports detailing identified vulnerabilities and remediation recommendations. - Translate complex cloud security findings into actionable insights. - Provide expert guidance to clients, turning security recommendations into actionable plans. - Stay updated on certifications, emerging cloud security threats, and best practices. Qualifications - 3-5 years of experience in cloud security, with a focus on Microsoft Azure, M365, and AWS security. - Deep understanding of Microsoft Entra ID, Azure AD, Microsoft Defender Suite, Microsoft Sentinel, and DLP strategies. - Strong knowledge of AWS security services, including IAM, Security Hub, GuardDuty, and VPC security configurations. - Experience conducting security assessments, risk analysis, and remediation in M365, Azure, and AWS cloud environments. - Relevant certifications such as Microsoft AZ-500, MS-500, SC-100, SC-200, SC-400, and industry standards like CISSP, or CCSP is a plus. - Bachelor’s degree in Computer Science, Information Security or a related field. Requirements - Uphold ethical standards, ensuring engagements and client interactions are conducted with the utmost integrity. - Maintain strict confidentiality, showcasing the company's dedication to ethical excellence. Benefits - The base salary range for this position in the U.S. is $120,000 to $185,000.00 per year. - A candidate's salary is determined by various factors including relevant work experience, skills, certifications, job level, years of experience, and location.

• Building strong detection foundations and response frameworks to advance HubSpot’s security posture. • Driving the development of automated detection systems and prioritizing mitigations based on current threats and coverage gaps. • Partnering closely with engineering teams to supply data for purple team exercises and implement practical solutions that mitigate risks. • Guiding architectural decisions for our corporate security logging infrastructure and SIEM. • Contributing code to security automations, reviewing designs for detection reliability, and providing technical mentorship to engineers. • Acting as a key point of contact for threat intelligence and incident response expertise. • Supporting incident response efforts by aiding in investigations and understanding bad actor behaviors.

• Lead our security engineering and compliance initiatives • Conduct security assessments and penetration tests • Implement and maintain security controls for cloud infrastructure • Design, build, and maintain DevSecOps pipelines • Perform security code reviews • Implement robust security guardrails for AI systems • Own and maintain SOC2 Type 2, ISO 27001, and HIPAA compliance programs • Coordinate with engineering and product teams for security integration • Manage relationships with security vendors and external auditors • Conduct security training sessions and mentorship for developers • Oversee incident response processes and communications during security events. • Report to Head of Engineering on security posture and risk assessments. • Update security policies and procedures.