About this role
Lead Cloud Security Engineer
The Role at a Glance
This position will provide subject matter expertise and direction on complex projects/initiatives to design, build, and automate information security and compliance in the Cloud. You will deliver complex solutions to help protect Lincoln Financial's information technology assets in the Cloud. Additionally, you will be responsible for ensuring the security of enterprise Cloud environments, as well as application security.
What you'll be doing
- Reviews and evaluates proposed cloud architectures and solutions against Enterprise Security Standards, providing guidance and approval to ensure security and compliance requirements are met.
- Conducts security assessments of new and existing cloud services or products to evaluate risk, identify gaps, and inform adoption or remediation decisions.
- Tracks and maintains alignment with industry compliance frameworks (e.g., NIST, CIS Foundations) to ensure cloud environments meet applicable regulatory and security requirements.
- Researches, develops, and implements complex Enterprise Security Standards with inputs from service assessments, compliance frameworks, and industry best practices.
- Proactively identifies and drives improvements in our environment that create measurable value for the team, department, and downstream stakeholders.
- Provides subject matter expertise to advise or mentor team members and applicable internal/external stakeholders on complex assignments and projects.
- Provides input into the development of the cloud security roadmap and delivers project-specific security requirements and solutions.
- Designs and develops complex cloud security architectures and performs complex proof-of-concepts for cloud security products.
- Collaborates with internal stakeholders to ensure the successful implementation of complex security solutions and architectures.
- Supports incident response efforts by providing architectural context, root-cause analysis, and remediation guidance for cloud security incidents.
- Communicates complex technical concepts clearly to both technical and non-technical stakeholders and leadership.
- Defines and reports on key security metrics and