Responsibilities
- Lead daily cloud security operations across AWS and Azure, including triage, prioritization, escalation, validation, exception handling, and closure.
- Define cloud security operating rhythms, runbooks, ownership models, dashboards, executive metrics, and remediation governance.
- Serve as cloud security lead during incidents and partner with SOC and incident response teams on investigation, containment, recovery, and post-incident improvements.
- Drive closure of vulnerabilities, misconfigurations, identity risks, data exposures, and control gaps through risk-based SLAs and exception management.
- Lead cloud security design reviews and launch-readiness assessments for new products and platforms.
- Partner with CloudOps and infrastructure teams on secure landing zones, IAM patterns, network controls, encryption, secrets management, monitoring, backups, and operational readiness.
- Own and optimize CSPM, CNAPP, and DSPM operations, including onboarding, policy tuning, integrations, workflow automation, risk correlation, and posture reporting.
- Provide technical direction, work allocation, coaching, feedback, and development support to cloud security engineers.
- Communicate cloud risk, incident impact, SLA performance, operational health, and investment needs to engineering and security leadership.
Requirements
- Bachelor’s or master’s degree in computer science, cybersecurity, engineering, or a related field, or equivalent experience.
- 10–15 years of experience in cloud security, product security, infrastructure security, security operations, or related engineering roles, including technical leadership responsibilities.
- Deep hands-on AWS and/or Azure security experience covering IAM, networking, containers/Kubernetes, encryption, secrets, logging, monitoring, and infrastructure-as-code.
- Operational experience with CSPM/CNAPP and practical DSPM experience involving data discovery, classification, access analysis, and exposure remediation.
- Experience supporting cloud incident response with SOC teams and coordinating actions across engineering, infrastructure, and business stakeholders.
- Strong vulnerability management, SLA governance, exception management, escalation, and remediation closure experience.
- Experience assessing cloud readiness for new products and translating security requirements into infrastructure and engineering plans.
- People-management exposure or demonstrated experience mentoring engineers, coordinating delivery, and influencing without authority.
- Strong scripting or automation capability using Python, Bash, Terraform, policy-as-code, or equivalent technologies.
- Preferred experience includes high-scale SaaS, multi-cloud, or cloud-native product environments.
- Preferred familiarity with NIST CSF, NIST incident response guidance, CIS benchmarks, ISO 27001, and SOC 2.
- Exposure to CIEM, CWPP, cloud detection engineering, SIEM/SOAR integrations, and data-loss prevention controls is preferred.
- Industry-recognized cloud security or security leadership certifications are a plus.
About Tekion
Tekion is redefining automotive retail with an end-to-end, AI-native platform purpose-built for the industry. With AI built into every workflow, Tekion delivers intelligent automation, real-time insights, and advanced decision support—driving measurable efficiency, revenue, and modern consumer experiences. As the first and fastest cloud-native platform for automotive, Tekion unites OEMs, dealers, partners, and consumers through its revolutionary suite of solutions: Automotive Retail Cloud (ARC) for retailers, Automotive Enterprise Cloud (AEC) for manufacturers and large enterprises, and Automotive Partner Cloud (APC) for technology and industry partners. Together, these offerings connect the entire ecosystem on a single, AI-native platform that empowers teams to operate smarter, serve faster, and scale more profitably. With AI-powered, cloud-native technology, Tekion is enabling the most seamless, transparent, and profitable retail experiences in the industry—helping automotive businesses transform how they operate today and prepare for what’s next.