Who We Are

Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact.

To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.

What You'll Do

As a key member of our Secure Data Squad, you’ll drive advancements in Cloud and Data Security for our Secure Infrastructure Platform Portfolio. This role focuses on addressing cloud security misconfigurations, enhancing risk prevention, and implementing security automation. 

You will be working in a Security Engineering, Architecture and Automation capacity to drive and support improvements within our Secure Infrastructure Platform product portfolio.  Areas of focus will include specializing in cloud security misconfigurations, remediation, risk prevention, and automation efforts.

 You will:

• Collaborate with application development, data protection, information security, and risk management teams to design and implement robust data and cloud security solutions.
• Develop and test proof-of-concept models; explore and integrate new security technologies.
• Monitor and analyze data from information protection systems, identifying trends and potential threats.
• Maintain technical service roadmaps for data and cloud security initiatives.
• Mitigate risks by managing Cloud Security Posture Management (CSPM) and Cloud Workload Protection solutions.
• Apply industry and BCG security knowledge, policies, standards, and practices. 

What You'll Bring

• 5-8 years' experience in infrastructure, cloud security or security engineering, with global large-scale implementations.
• Bachelor’s degree in computer or information sciences, software engineering related field preferred or equivalent experience. 
• Advanced hands-on experience with Prisma Cloud or similar tools; advanced knowledge of CSPM and CWP
• Experience with infrastructure automation using Terraform and GitHub actions. 
• Experience with security controls on CI/CD pipelines as part of DevSecOps processes. 
• Experience working in a globally distributed environment across multiple platforms
• 5+ year's experience with at least one cloud, Amazon Web Services (AWS), Microsoft Azure and Google Compute Platform (GCP)
• Experience on native AWS/Azure platforms including Serverless functions, preferably Lambda in AWS
• Experience with containerization and orchestration technologies (Kubernetes, Docker)
• Knowledge of networking and security best practices in cloud environments 
• Strong problem-solving skills and the ability to approach problems from multiple viewpoints 
• Experience with deploying scalable cloud-based security solution architectures on a public cloud 
• Strong customer service skills

• Desirable: 
o Agile tool experience (e.g., Jira, Confluence).
o Automation and scripting skills using languages like Python, or PowerShell.
o Relevant cloud (e.g., AWS, Azure, GCP) and security certifications (e.g., CISSP, CCSP, SABSA, ITIL).
o Secrets management (e.g, HashiCorp Vault, AWS Secrets Manager, AKV) and certificate lifecycle management.

Who You'll Work With

You will be part of a diverse and dynamic team located across Europe, Asia, and the Americas, working in a highly collaborative environment with like-minded colleagues.

Additional info

YOU’RE GOOD AT

• Exceptional verbal and written communication skills in English is required; command of additional languages will be considered a plus
• Experienced leading small/medium projects
• Patience, professionalism, and adaptability under pressure.
• Ability to engage with both technical and non-technical stakeholders.
• Strong organizational, planning, and work management skills within Agile environments.
• Expertise in balancing and negotiating competing priorities with stakeholders, leveraging excellent influencing skills.
• Collaborate with IT security and DevOps teams to enforce security best practices in cloud environments

Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws.\n
BCG is an E - Verify Employer. Click here for more information on E-Verify.