Senior Cloud Security Engineer

Join one of the nation’s leading retail automotive chains in a full-time, on-site role as a Senior Cloud Security Engineer. In this position, you will be part of a high-performing IT Security team, responsible for leading the design, implementation, and governance of security controls across a multi-cloud environment. This role has primary responsibility for securing Microsoft Azure environments and supporting a Secure Software Development Lifecycle (SDLC) using GitHub. You will partner closely with Cloud Engineering, Application Development, DevOps, and Security Operations to ensure platforms and pipelines are secure by design, resilient, and compliant with regulatory standards.

The ideal candidate brings strong hands-on cloud security expertise, sound architectural judgment, and the ability to translate security strategy into scalable, practical solutions. This position reports directly to senior cybersecurity leadership.

Key Responsibilities

• Define and lead cloud security standards across identity, networking, compute, storage, containers, and platform services
• Act as a subject-matter expert in cloud threat modeling, attack paths, and risk prioritization
• Collaborate with infrastructure teams to embed security into cloud platform design, leveraging automation wherever possible
• Design and manage security controls across Azure and AWS environments, including IaaS, PaaS, and serverless workloads
• Implement and optimize cloud security tools (e.g., CSPM, CWPP, CIEM) to detect misconfigurations and prevent runtime threats
• Integrate security into CI/CD pipelines and GitHub workflows, enabling automated vulnerability scanning and code-to-cloud visibility
• Ensure alignment with industry standards such as NIST and CIS Controls
• Translate security best practices into documented, audit-ready technical controls

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or related field (or equivalent experience)
• 7+ years of information security experience, including 3+ years focused on cloud security architecture
• Hands-on experience securing Microsoft Azure and AWS in enterprise environments
• Strong knowledge of:
• Cloud IAM and identity federation
• Network segmentation and cloud-native firewalls
• Encryption and key management (KMS/HSM)
• Container and Kubernetes security
• Experience implementing Secure SDLC / DevSecOps practices, especially within GitHub environments
• Relevant certifications preferred (e.g., CISSP, GIAC, Azure Security Engineer Associate, AWS Security Specialty)
• Excellent communication skills with the ability to influence both technical and business stakeholders

Mavis is an Equal Opportunity Employer

Consistent with our commitment to the principle of equal employment opportunity for all individuals, we enforce a zero-tolerance policy on discrimination at Mavis. Employment decisions are made without regard to an applicant's or employee's actual or perceived race, color, religion, creed, sex, pregnancy, sexual orientation, national origin, age, ancestry, ethnicity, disability, citizenship, alienage, marital status, domestic or civil union partnership status, familial status, caregiver status, military or veteran status, transgender status, gender identity or expression, genetic information, predisposing genetic characteristic, status as a victim of domestic violence, stalking and sex offenses, or any other status protected by applicable federal, state or local laws, regulations or ordinances. Exceptions or modifications to certain job duties and/or expected schedules may be provided for an employee who needs a reasonable accommodation for: (a) a sincerely held religious belief, observance or practice that conflicts with the expected schedule for a position; or (b) an otherwise qualified individual with a disability, unless such accommodation poses an undue hardship on our business, in accordance with applicable federal, state and local laws. Additional information is available by contacting [email protected].

We will endeavor to make a reasonable accommodation / modification to the known physical or mental limitations of a qualified applicant with a disability to assist in the hiring process, unless the accommodation would impose an undue hardship on the operations of our business, in accordance with applicable federal, state and local laws. If you believe you require such assistance to complete this Application for Employment or to participate in the interview process, please contact our Employee Experience team at (914) 984-2500 ext. 5631. We also will endeavor to provide reasonable accommodation for a job applicant's or an employee's sincerely held religious beliefs, observances, or practices that conflict with a work requirement unless the accommodation poses an undue hardship to our business, in accordance with applicable federal, state and local laws. If you believe you require such an accommodation, please contact our Employee Experience team at (914) 984-2500 ext. 5631. In addition, applicants may report any instances of perceived discrimination through HRConnect either by calling toll-free at 1-877-628-4755 or by sending an email to [email protected].