Cloud Security Consultant

Description and Requirements
Role Value Proposition:
This role serves as a key member of the cloud security team, within Information Security, focusing on security controls for the cloud environment. The primary focus will be securing cloud technologies, ensuring systems are properly implemented, appropriate processes are developed, and daily monitoring and alerts are managed. This role must have a strong understanding of, and experience with, various IaaS, PaaS, and SaaS platforms, identifying and eliminating risks in these environments.
Key Responsibilities:

• Partnering with architecture, engineering, application, security, and operational staff to identify and drive resolution on Cloud security projects and issues.
• Defining security controls for a Hybrid Cloud implementation using a combination of Cloud-native and On-Premises Security tools and applications.
• Conducting security reviews and recommendations for IaaS, PaaS, & SaaS Cloud environments
• Developing Cloud Security requirements documentation for IaaS, PaaS, and CaaS environments.
• Defining Network Security and Encryption evaluation and recommendations for complex infrastructure.
• Designing and implementing controls with Microsoft Defender suite, AWS security hub, Google Cloud Security command center, and equivalent security tools.
• Securing Containerized environments and ability to identify security vulnerabilities.
• Interfacing with vendors to ensure the appropriate tools, configurations, and workflows are in place.
• Developing data protection proposals using Data loss prevention (DLP), Data discovery/classification, and digital rights management (DRM) tools.

Essential Business Experience and Technical Skills:
Required:

• 2+ years of experience with Google Cloud, Microsoft Azure, and/ or AWS Infrastructure as a Service and Platform as a Service environment. Awareness of Data Sovereignty and privacy controls around the world and the ability to translate that to security control that can be applied in public cloud environments.
• 2+ years of experience with Cloud-native security controls in different Cloud environments.
• Minimum of 3 years of experience managing Security within Identity Provider preferably Active Directory in Windows Servers 2012 and 2016. Active Directory Security groups and Group policies administration and design experience and how it can be translated for use in the Cloud IaaS environments and Azure Active Directory.
• 2+ years of experience with scripting tools like PowerShell or Python or Bash from an infrastructure security perspective.
• Minimum of 1 year working on security tools for Containers and microservices environments.
• At least one Industry-recognized cloud security certification (CCSP, CCSK, CCC-PCS, etc.)
• Bachelor's degree in technology or related field required and Minimum of 5+ years in different information Security domains or no degree and 7+ years' experience.

Preferred:

• Industry-recognized information security certifications are preferred (CISSP).
• 1 Year of Experience with Cloud Access Security Broker Tools like Bitglass, Netskope, or M-Vision (Skyhigh) for Data Loss Prevention for SaaS-based applications.
• At least 4 years of experience with Data Loss Prevention tools for Website uploads, Endpoint Data Loss Prevention, and Network Data Loss Prevention.
• Strong ability to communicate to stakeholders with various levels of expertise.
• Strong record of success in supporting large-scale programs, preferably in a global organization.
• Excellent verbal and written communication skills.

At MetLife, we're leading the global transformation of an industry we've long defined. United in purpose, diverse in perspective, we're dedicated to making a difference in the lives of our customers.
Benefits We Offer
Our U.S. benefits address holistic well-being with programs for physical and mental health, financial wellness, and support for families. We offer a comprehensive health plan that includes medical/prescription drug and vision, dental insurance, and no-cost short- and long-term disability. We also provide company-paid life insurance and legal services, a retirement pension funded entirely by MetLife and 401(k) with employer matching, group discounts on voluntary insurance products including auto and home, pet, critical illness, hospital indemnity, and accident insurance, as well as Employee Assistance Program (EAP) and digital mental health programs, parental leave, volunteer time off, tuition assistance and much more!
About MetLife
Recognized on Fortune magazine's list of the 2024 "World's Most Admired Companies" as well as the 2024 Fortune 100 Best Companies to Work For ®, MetLife , through its subsidiaries and affiliates, is one of the world's leading financial services companies; providing insurance, annuities, employee benefits and asset management to individual and institutional customers. With operations in more than 40 markets, we hold leading positions in the United States, Latin America, Asia, Europe, and the Middle East.
Our purpose is simple - to help our colleagues, customers, communities, and the world at large create a more confident future. United by purpose and guided by empathy, we're inspired to transform the next century in financial services. At MetLife, it's #AllTogetherPossible . Join us!
Equal Employment Opportunity/Disability/Veterans
If you need an accommodation due to a disability, please email us at [email protected]. This information will be held in confidence and used only to determine an appropriate accommodation for the application process.
MetLife maintains a drug-free workplace.
#BI-Hybrid