D

Deloitte

Audits companies and advises on tax and technology

Cloud Security Engineer - Enterprise Security

Security Engineering & ArchitectureUpdated on Nov 9
Full-timeHungary

About the Job

Requirements

  • Hands-on experience securing workloads in at least one major cloud provider: AWS, Azure, or GCP.
  • Practical experience with at least one CSPM/CNAPP platform, such as Wiz, Prisma Cloud, Defender for Cloud, Orca, or Lacework.
  • Working knowledge of Infrastructure-as-Code tools such as Terraform, CloudFormation, or ARM/Bicep, and scripting; Python is preferred, with Bash or PowerShell as a plus.
  • Solid grasp of cloud networking and identity fundamentals, including VPC/VNet design, security groups, IAM policies, and federation/SSO concepts.
  • Ability to explain technical misconfigurations to engineers and business risks to executives.
  • Interest in growing into a client-facing functional consulting role alongside technical work.
  • Proficiency in written and spoken English.
  • EU passport.

Responsibilities

  • Design and implement cloud security controls across AWS, Azure, and/or GCP, covering identity and access (IAM/RBAC), network security (VPCs/VNets, security groups, segmentation), encryption, and key management.
  • Deploy and tune CSPM and CNAPP tooling, such as Wiz, Prisma Cloud, Microsoft Defender for Cloud, and AWS Security Hub, to detect misconfigurations and reduce attack surface.
  • Build security into Infrastructure-as-Code and CI/CD pipelines, including IaC scanning and policy-as-code using OPA/Rego or Sentinel.
  • Secure containerized and serverless workloads, including Kubernetes, EKS/AKS/GKE, and Lambda/Functions, using CWPP and runtime security practices.
  • Assess and harden cloud identity, including CIEM, least-privilege role design, and federation between cloud IAM and enterprise identity providers.
  • Lead or support cloud security assessments, architecture reviews, and migration security reviews for clients moving workloads to or between cloud platforms.
  • Translate technical findings into client-ready recommendations by running workshops, presenting risk posture to stakeholders, and contributing to remediation roadmaps.
  • Track cloud-native attack techniques and emerging cloud services, and bring relevant developments to the team and clients.

Desired Qualifications

  • Multi-cloud experience.
  • Hyperscaler certifications such as AWS Certified Security Specialty, Microsoft Azure Security Engineer Associate, or Google Professional Cloud Security Engineer, or Netskope certification.
  • Security certifications such as CISSP, CCSP, or vendor-specific CSPM/CNAPP certifications.
  • Proficiency in German.

About the Company

Deloitte

Audits companies and advises on tax and technology

Deloitte audits companies and advises businesses and governments on tax, technology, and risk, and it is one of the Big Four, the world's four largest accounting firms. In 1849 its founder became the first independent auditor of a public company, Britain's Great Western Railway. Its auditors check companies' financial reports for errors and fraud before investors rely on them, while its consultants design strategy, install business software, and defend clients against cyberattacks. Clients pay fees for each audit or project, and each country's Deloitte firm is a separate business owned by its local partners. Deloitte was founded in London in 1845 and is based in New York.

Company size
10,001+
Company stage
Late Stage VC
Total funding
$17.1M
Headquarters
New York, NY
Founded
1845

Recently Posted Jobs

Explore more opportunities at Deloitte

See more jobs