About the role
Responsibilities:
- Automate the provisioning of cloud monitors, automated remediation, security baselines, and templates, etc., through the concept of pipeline engineering.
- Implement core cloud security capabilities such as identity and access, data protection, security controls and compliance, vulnerability management, threat detection and response, and logging/monitoring.
- Perform penetration testing, red/blue teaming, and gap analysis with audit and cybersecurity partners.
- Support operations and incident response in cloud events and incidents.
- Design and deploy programs, dashboards, tests, scripts, and automation to enhance cloud security posture, detection, and response.
- Build prototypes and perform proof of concepts to demonstrate security value
- Remain up-to-date on emerging technologies and architecture and propose ways to use them in current and upcoming projects.
- Educate and guide team members on cloud standards, procedures, and guidelines/best practices.
- Act as an SME for all cloud technical hands-on questions related to cloud security.
- Lead and facilitate the creation of compliance automation and policy-as-code to streamline cloud governance in partnership with the technical product analyst(s) and manager(s).
- Strive to provide internal and external customers with excellent customer service and world-class service, and focus on improvement and benefits to the cloud consumer's outcomes.
- Influence and support more junior cloud security engineers and help develop their skill sets and understanding of cloud security.
Requirements:
- Willingness and ability to live the McDonald's values every day: Serve, Inclusion, Integrity, Community, and Family.
- Ability to effectively communicate with other senior leaders of IT on program strategies and plans and negotiate quality solutions.
- Must be attentive to details, organized, self-motivated, and driven.
- Ability to create system and process flow diagrams, data flow diagrams, sequence and UML diagrams, and inter- and intra-system dependencies within the functional domain and across them
- Knowledge and understanding of industry trends and new technologies and ability to apply trends to architectural needs.
- Excellent written and oral communication skills with the ability to communicate effectively with technical and non-technical staff.
- Defines and promotes best practices; cultivates a culture of innovation and learning, including willingness to instruct and coach in a cloud training program as needed.
- Demonstrated strong analytic and problem-solving abilities.
- 5+ years of cloud development and support experience, such as Microsoft Azure, Amazon Web Services (AWS), or Google Cloud Platform (GCP), and a bachelor's degree or 3 years of relevant experience and a master's degree.
- Demonstrated ability to provide architectural design, leadership, management, and mentoring to team members.
- Experience developing design specifications, test plans, and protocols.
- Experience mentoring less experienced team members.
Expert technical knowledge in three or more and strong technical knowledge in 6 or more of the following domains:
- Cryptography, encryption, and key management.
- Data protection and security.
- Governance and risk management.
- Identity, access, and permissions.
- Infrastructure security.
- Logging and monitoring.
- Security event and incident response.
- Threat and vulnerability management.
- Application and interface security.
- DevOps pipeline governance and security.
- Professional-level cloud certifications (AWS, Azure).
Preferred Qualifications:
- Infrastructure as Code (IaC) experience: scripting and automation via AZ CLI/PowerShell, Bash, Bicep, JSON templates, etc.
- Deep experience in building Kubernetes environments.
- Prior experience in securing Windows and Linux servers at scale. Enabling DevOps in IaaS/PaaS is a plus.
- Experience in multiple programming languages like Python, C#, Java, JavaScript, Ruby on Rails, etc.
- CCSK or similar technical security certification.