Cloud Security Controls Engineer

Are you an experienced, passionate pioneer in technology who wants to work in a collaborative environment? As an experienced Cloud Security Controls Engineer, you will have the ability to share new ideas and collaborate on projects as a consultant without the extensive demands of travel. If so, consider an opportunity with Deloitte under our Project Talent Model. Project Talent Model (PTM) is a talent model that is tailored specifically for long-term, onsite client service delivery.

Recruitment for this role ends on 8/7/2026.

Work you'll do/Responsibilities

The Cloud Security Controls Engineer supports the client as a Cloud Security Engineering Pod to support their Cloud Security efforts as an extension of their own team

• Automate preventative and detective cloud security controls across AWS, GCP, and Azure using cloud-native services and Open Policy Agent (OPA).
• Design, develop, test, and deploy cloud security controls through the DevOps lifecycle to support secure, scalable, and repeatable delivery.
• Collaborate with security, platform, and engineering teams to embed security controls into cloud environments and development workflows.
• Build and maintain automation, testing, and validation capabilities to improve the effectiveness and reliability of cloud security controls.
• Support continuous improvement of cloud control coverage through policy-as-code, detection engineering, and security engineering best practices.
• Develop and maintain detection logic and rules to strengthen monitoring and response capabilities across cloud environments.
• Partner with cross-functional teams to troubleshoot control failures, improve implementation quality, and support secure cloud operations.

The successful candidate would possess these skills:

• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to lead projects or workstreams
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to provide clear guidance to others

The Team

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

Our Cyber Operate Offering operates clients' critical cyber assets as a fully managed service or working in partnership with clients. Provides talent, leading technologies, and processes to operate client cyber capabilities, including the identity lifecycle, security operations, threat intelligence, application security business transformation, and continuous compliance.

Qualifications

Required

• 3-5 years of experience in DevSecOps engineering with a focus on cloud environments such as AWS, GCP, or Azure, ideally within a security program.
• 3+ years of experience with cloud-native development and architecture, leveraging services and tools specific to AWS, GCP, and Azure.
• 3+ years of proficiency with Python for testing, automation, and custom tool development.
• 3+ years of proficiency with Terraform for infrastructure automation and security control deployment.
• 3+ years of experience with software testing methodologies and tools.
• 3+ years of experience with DevOps tools and practices, including automated build, test, and deployment processes.
• 2+ years of hands-on experience with Open Policy Agent (OPA) and policy enforcement.
• 2+ years of experience in detection engineering, including detection-as-code practices and development/maintenance of detection rules.
• 2+ years of experience with SIEM query languages such as Splunk SPL, and familiarity with rule formats such as YARA.
• Bachelor's degree, preferably in Computer Science, Information Technology, Computer Engineering, or related IT discipline; or equivalent experience
• Limited immigration sponsorship may be available
• Ability to travel 10%, on average, based on the work you do and the clients and industries/sectors you serve
• Must be able to start by 8/17/2026
• Must be able to work in a Hybrid model - minimum of 3 days onsite at the client location in Dallas, TX.

Preferred

• Strong knowledge of cloud security design patterns and secure-by-default engineering practices.
• Experience working in fast-paced, cross-functional environments with security, engineering, and platform teams.
• Ability to communicate technical concepts clearly and collaborate effectively across stakeholders.
• Analytical/ Decision Making Responsibilities
• Analytical ability to manage multiple projects and prioritize tasks into manageable work products
• Can operate independently or with minimum supervision
• Excellent Written and Communication Skills
• Ability to deliver technical demonstrations

The wage range for this role considers the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $99,900 to $124,900.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.