Cloud Security Consultant

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

The security consultant support clients in assessing, improving, and maintaining the cybersecurity posture of their Cloud Security environments to mitigate security risks (e.g., insider and external threats, intentional and accidental). Position is for an experienced security professional with demonstrated experience within Cloud Security and Zero Trust architecture.

• Advise clients on design and development of cloud security Zero Trust architectures for cloud/hybrid systems deployed across multiple cloud service providers, including AWS, Azure, GCP, and VMware NSX.

• Advise clients on Zero Trust Cloud architecture, development of high-level and low-level architecture designs, including recommended security controls including:

• Reviewing cloud security architectures and determining if good practices are being followed (e.g., the Landing Zone concept, Network and resource segmentation, cloud policy design structure); and providing recommendations to comply with applicable cybersecurity framework.

• Reviewing security products utilized (e.g., firewalls, IDS, IPS, CNAPP, Cloud management plane) and determining if they are configured properly.

• Reviewing security policies, plans, and procedures; assessing network monitoring capabilities; analyzing system and resource logs, security alerts and events, and packet captures to identify security threats; and providing recommendations to comply with applicable cybersecurity framework.

• Reviewing administrative, technical, and physical security controls and providing recommendations to mitigate the identified security risks.

• Help clients implement security controls necessary for Zero Trust cloud security architecture.

• Take ownership of end-end technical delivery of Cloud Security work for client and ensure what's sold is getting delivered to satisfaction of client.

• A willingness to go beyond the ordinary to meet and exceed client expectations.

• Support Cloud Security opportunity creation and development of client presentations and SOWs.

• Establish strong client relationships in key accounts to help progress the Security Services portfolio.

• Contribute content and advice to the offering development process.

• Experience in working with Azure, GCP or AWS native cloud security and governance tools as well as 3rd party tools.

• Experience with assessment, development, implementation, optimization, and documentation of a comprehensive and broad set of security technologies and processes within SaaS, IaaS, PaaS, and other cloud environments.

• Experience in delivering Cloud Security maturity assessments including roadmaps to bridge existing security gaps.

• Proficiency in one of the following cloud security domains: Networking, IAM, Infrastructure and Platform, Data or Application security. Good understanding of other domains and threats techniquest and tactics associated with them.

• As a technical lead/architect, successfully support cloud security transformation environment to a Zero Trust architecture.

• Deep knowledge in Zero Trust architecture and associated frameworks (E.g., NIST SP 800-207, CISA’s Zero Trust Maturity Model, CSA Software Defined Perimeter and CSA Cloud Controls Matrix)

• The candidate must have exceptional communication and presentation skills as well as must be a self-starter and always exhibit professional business conduct.

• Stakeholder management and interpersonal skills at both a technical and non-technical level.

• Must be willing to travel up to 50%, depending on client requirements.

• Excellent customer service and communication (oral / written) skills required. 

• English: Fluent

• Strong critical thinking and analytical skills and ability to think “out of the box” required.

• Must be able to work independently or with a team, under minimum supervision.

Required Technical and Professional Expertise

• At least 5 years of experience with cloud platforms, including at least one of AWS, Azure, GCP, or VMware NSX.

• Proven cloud security knowledge gained from a Cloud Security specific job role.

• Deep knowledge of Cloud Secrity Framework, Cloud Security Benchmarks and Cloud Security Controls

• Candidates should possess proven record in advising on Cloud Security at the