Scan your resume against ATS criteria for this MDR - Cloud Security ACON role at KPMG Ukraine.
We are looking for a of Cloud Security resource with 2+ years of experience for of our engagements. The resource must work from our Noida office and willing to work on shifts
2–6 years in cloud security operations and engineering with progressive responsibility in securing enterprise cloud environments across AWS and Azure.
Oversee enterprise-scale cloud security architecture, policy governance, and security operations across AWS and Azure environments.
Lead implementation and management of cloud-native security controls including IAM, security groups, network segmentation, and encryption services.
Manage day-to-day cloud security operations including monitoring, alert triage, incident response, and remediation coordination across AWS and Azure platforms.
Drive cloud security posture improvement using CSPM tools (Wiz, Prisma Cloud, or similar); identify misconfigurations, prioritize findings, and track remediation to closure.
Lead cross-functional teams in cloud security operations, vulnerability management, and compliance initiatives aligned with security standards.
Drive adherence to defined SLAs and KPIs across cloud security operations; track, report, and continuously improve operational metrics and service delivery standards.
Manage and track security incidents, service requests, and change management activities through ITSM/ticketing platforms such as ServiceNow, ensuring timely updates, escalations, and closures.
Architect secure cloud networking solutions: design VPC/VNet topologies, implement transit gateways, Azure Firewall, AWS Network Firewall, and Network Virtual Appliances (NVAs).
Coordinate security incident response across global teams; develop and refine playbooks, SLAs, and escalation procedures for cloud environments.
Develop and maintain executive dashboards presenting cloud security metrics, risk posture, and compliance status to senior leadership.
The ideal candidate will:
Demonstrate solid understanding of cloud security architectures across AWS and Azure, with a strong grasp of Zero Trust principles and defense-in-depth strategies.
Design secure cloud topologies, define security governance workflows, and guide risk-based access controls.
Produce clear SOPs, runbooks, security assessment reports, and technical design documents for cloud environments.
Collaborate with compliance, architecture, DevOps, and operations teams to ensure security by design.
Drive continuous improvements via automation, Infrastructure as Code (IaC), and actionable security metrics.
Effectively manage day-to-day security operations while balancing strategic initiatives and stakeholder expectations.
Demonstrate ability to define, monitor, and drive SLA/KPI compliance across security operations, ensuring consistent and measurable service delivery.
Mandatory Certification Required:
(At least required; multiple strongly preferred)
·
·
·
·
·
·
·
.
Technical Skills Required: Cloud Networking and Architecture:
Hands-on experience designing AWS VPC architectures: security groups, NACLs, transit gateways, VPC peering, PrivateLink, and Direct Connect.
Proficiency with Azure Virtual Networks (VNets), NSGs, Azure Firewall, User-Defined Routes (UDRs), Application Gateway, and ExpressRoute.
Understanding of hybrid cloud connectivity, micro-segmentation, and secure network architectures across AWS and Azure.
Familiarity with Zero Trust architecture principles and cloud-native security design patterns.
Security Operations & Analytics:
Hands-on experience managing day-to-day cloud security operations including monitoring security alerts, triaging incidents, and coordinating remediation activities across AWS and Azure.
Strong ability to perform security assessments, configuration reviews, and compliance checks within AWS and Azure environments.
Experience investigating findings in cloud environments, conducting root cause analysis, and implementing preventive controls.
Proficiency in reviewing and responding to security findings from CSPM tools (Wiz, Prisma Cloud, or similar) and ensuring timely resolution within defined SLAs.
Experience working with ITSM/ticketing tools such as ServiceNow to log, track, prioritize, and close security incidents and service requests in line with defined SLAs and KPIs.
DevSecOps & Automation:
Familiarity with Infrastructure as Code (Terraform, CloudFormation, ARM templates) and integrating security controls into IaC pipelines.
Understanding of CI/CD security integration, container security (Docker, Kubernetes), and API security.
Experience with automation scripting (Python, PowerShell, Lambda, or Azure Functions) to support and improve security operations.
skills, including ability to explain complex security concepts in simple terms.
2–6 years in cloud security operations and engineering with progressive responsibility in securing enterprise cloud environments across AWS and Azure.
Oversee enterprise-scale cloud security architecture, policy governance, and security operations across AWS and Azure environments.
Lead implementation and management of cloud-native security controls including IAM, security groups, network segmentation, and encryption services.
Manage day-to-day cloud security operations including monitoring, alert triage, incident response, and remediation coordination across AWS and Azure platforms.
Drive cloud security posture improvement using CSPM tools (Wiz, Prisma Cloud, or similar); identify misconfigurations, prioritize findings, and track remediation to closure.
Lead cross-functional teams in cloud security operations, vulnerability management, and compliance initiatives aligned with security standards.
Drive adherence to defined SLAs and KPIs across cloud security operations; track, report, and continuously improve operational metrics and service delivery standards.
Manage and track security incidents, service requests, and change management activities through ITSM/ticketing platforms such as ServiceNow, ensuring timely updates, escalations, and closures.
Architect secure cloud networking solutions: design VPC/VNet topologies, implement transit gateways, Azure Firewall, AWS Network Firewall, and Network Virtual Appliances (NVAs).
Coordinate security incident response across global teams; develop and refine playbooks, SLAs, and escalation procedures for cloud environments.
Develop and maintain executive dashboards presenting cloud security metrics, risk posture, and compliance status to senior leadership.
The ideal candidate will:
Demonstrate solid understanding of cloud security architectures across AWS and Azure, with a strong grasp of Zero Trust principles and defense-in-depth strategies.
Design secure cloud topologies, define security governance workflows, and guide risk-based access controls.
Produce clear SOPs, runbooks, security assessment reports, and technical design documents for cloud environments.
Collaborate with compliance, architecture, DevOps, and operations teams to ensure security by design.
Drive continuous improvements via automation, Infrastructure as Code (IaC), and actionable security metrics.
Effectively manage day-to-day security operations while balancing strategic initiatives and stakeholder expectations.
Demonstrate ability to define, monitor, and drive SLA/KPI compliance across security operations, ensuring consistent and measurable service delivery.
Mandatory Certification Required:
(At least required; multiple strongly preferred)
·
·
·
·
·
·
·
.
Technical Skills Required: Cloud Networking and Architecture:
Hands-on experience designing AWS VPC architectures: security groups, NACLs, transit gateways, VPC peering, PrivateLink, and Direct Connect.
Proficiency with Azure Virtual Networks (VNets), NSGs, Azure Firewall, User-Defined Routes (UDRs), Application Gateway, and ExpressRoute.
Understanding of hybrid cloud connectivity, micro-segmentation, and secure network architectures across AWS and Azure.
Familiarity with Zero Trust architecture principles and cloud-native security design patterns.
Security Operations & Analytics:
Hands-on experience managing day-to-day cloud security operations including monitoring security alerts, triaging incidents, and coordinating remediation activities across AWS and Azure.
Strong ability to perform security assessments, configuration reviews, and compliance checks within AWS and Azure environments.
Experience investigating findings in cloud environments, conducting root cause analysis, and implementing preventive controls.
Proficiency in reviewing and responding to security findings from CSPM tools (Wiz, Prisma Cloud, or similar) and ensuring timely resolution within defined SLAs.
Experience working with ITSM/ticketing tools such as ServiceNow to log, track, prioritize, and close security incidents and service requests in line with defined SLAs and KPIs.
DevSecOps & Automation:
Familiarity with Infrastructure as Code (Terraform, CloudFormation, ARM templates) and integrating security controls into IaC pipelines.
Understanding of CI/CD security integration, container security (Docker, Kubernetes), and API security.
Experience with automation scripting (Python, PowerShell, Lambda, or Azure Functions) to support and improve security operations.
skills, including ability to explain complex security concepts in simple terms.
How to apply for MDR - Cloud Security ACON at KPMG Ukraine?
Click the "Apply on Company Website" button on this page to submit your application directly on the employer's official portal.
What is the salary for this role?
Salary details will be discussed during the interview.
What experience is required?
2+ years of experience is required.
Is this position still open?
Yes, currently active and accepting applications.
Explore related active roles in security
MDR - Cloud Security ACON
KPMG Ukraine · Noida
