Cloud Security Engineer

Start free →

Or apply yourself on the official page →

About the role

Company Overview ClearView Healthcare Partners is a premier life sciences strategy consulting firm headquartered in Boston, with offices in San Francisco, New York City, London, Zurich and Gurgaon. Serving clients in the biopharmaceutical, medical device, and diagnostic spaces, we provide world-class strategic decision-making support across a diverse range of business issues. Our goal is to inform actionable recommendations that allow companies to achieve their business objectives. ClearView is in the process of migrating a significant portion of its local, on-premises resources to the cloud, and this role will be a key player in ensuring that migration happens securely and that our Azure environment is configured and governed to a high standard. ClearView is looking for a Cloud Security-focused Information Security Professional to join our Information Technology team. This role will be responsible for three main areas: Cloud Security Architecture & Operations (with an emphasis on Azure), SIEM engineering, and Monitoring/Testing to ensure compliance. This position requires the ability to work with minimal direction, flexibility to changing demands, and having an eye for process improvement. This position will work in our India office but will be responsible for ClearView's Information Security globally. Responsibilities Cloud security architecture and operations • Support the security workstream of ClearView's ongoing migration of on-premises resources to the cloud, helping ensure new Azure workloads are designed and configured securely from the outset. • Help configure, monitor, and continuously improve security controls in Azure (with secondary support for AWS), including Defender for Cloud, Security Hub/GuardDuty, IAM, Network Security Groups (NSGs), and baseline configurations. • Support identity governance in Microsoft Entra ID (Azure AD), including conditional access, privileged role assignments, and application/service principal reviews. • Assist with authoring, deploying, and monitoring Azure Policy definitions and initiatives to enforce configuration standards and compliance guardrails across subscriptions. • Support cloud security posture management (CSPM) efforts, identifying and remediating misconfigurations across Azure and AWS environments. • Assist with design and review of cloud architecture for security best practices, including network segmentation (NSGs, firewalls), least-privilege IAM, and encryption at rest and in transit. • Support secrets and key management practices using Azure Key Vault, including access policy reviews, rotation, and integration with applications and pipelines. • Help assess and improve the security of containerized workloads (e.g., image scanning, registry access controls, AKS/container runtime configuration) as more services move to container-based architectures. • Assist with periodic reviews of access controls, MFA configurations, and conditional access policies across cloud and on-prem environments. • Support vulnerability management activities by collecting scan results, tracking remediation status, and validating fixes with relevant teams. • Contribute to standard build/hardening checklists for cloud resources, servers, and laptops, and verify that new systems are deployed according to these baselines. Security monitoring and incident support • Monitor cloud-native security tools and dashboards (e.g., Defender for Cloud, Security Hub, GuardDuty) as well as core SIEM, endpoint security, and email security tools for alerts and suspicious activity; help triage and escalate as needed. • Support tuning of SIEM correlation rules and alert thresholds to reduce noise, under the guidance of senior staff. • Build and maintain dashboards and reports (cloud and SIEM) that giv

View the official posting →