Cloud Security Tech lead

CREATIVITY IS OUR SUPERPOWER. It’s our heritage and it’s also our future. Because we don’t just make toys. We create innovative products and experiences that inspire fans, entertain audiences and develop children through play. Mattel is at its best when every member of our team feels respected, included, and heard—when everyone can show up as themselves and do their best work every day. We value and share an infinite range of ideas and voices that evolve and broaden our perspectives with a reach that extends into all our brands, partners, and suppliers.

Cloud Security Tech lead is responsible for leading and delivering day-to-day cloud security operations across Google Cloud Platform (GCP), Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI). This role combines hands-on technical execution with technical leadership, ensuring cloud security risks are accurately identified, prioritized, and remediated in alignment with business risk, Zero Trust principles, and regulatory requirements.

Cloud Security Tech lead provides direct technical leadership and guidance to cloud security engineers and analysts while partnering closely with Security Operations, IT, Engineering, and Application teams to drive remediation accountability and continuous improvement. Operating within a global delivery model, this role serves as a key execution and escalation point to ensure consistency, scalability, and resilience of the organization’s cloud security program.

In addition to operational ownership, cloud security strategy, tooling optimization, automation, and analytics, ensuring the cloud security capability evolves alongside emerging threats, technologies, and compliance requirements.

Roles and Responsibilities

• Provide direct technical leadership and day-to-day oversight of cloud security operations across GCP (primary), AWS, Azure, and OCI.
• Own and manage cloud security operations including configuration reviews, misconfiguration detection, prioritization, remediation tracking, and validation.
• Serve as a key execution partner and escalation point for cloud security initiatives, ensuring alignment with enterprise security strategy and priorities.
• Design, optimize, and maintain cloud security review and monitoring strategies using native cloud security tools and CSPM platforms.
• Translate large-scale cloud security findings into actionable risk intelligence through dashboards, metrics, and executive reporting.
• Drive risk-based prioritization of cloud security issues using threat intelligence, asset criticality, exposure, and business impact.
• Partner with application owners, DevOps, and platform teams to provide clear remediation guidance and influence timely risk reduction decisions.
• Ensure secure implementation and continuous improvement of IAM, network segmentation, encryption, logging, and monitoring controls across cloud platforms.
• Lead and support secure architecture and design reviews for new and existing cloud workloads.
• Champion Zero Trust principles and security-by-design practices across cloud environments.
• Develop, enhance, and maintain automation and scripting to detect misconfigurations and enforce cloud security baselines.
• Integrate CSPM and cloud security tooling with SIEM and SOAR platforms to improve visibility and response.
• Monitor emerging cloud security threats, vulnerabilities, and regulatory changes, incorporating lessons learned into improved controls and processes.
• Develop, maintain, and continuously improve cloud security runbooks, playbooks, and operational documentation.
• Mentor and develop cloud security engineers and analysts, strengthening technical depth and operational maturity.
• Provide advanced escalation support for complex cloud security findings, tooling issues, and remediation challenges.
• Work hours may vary, and the position may require availability during off-business hours due to incidents, system changes, or project needs.
• Additional duties may be assigned as necessary to meet the ongoing needs of the organization.

Skills and Qualifications

Required:

• 9+ years of experience in cloud security engineering, DevSecOps, or cloud security operations.
• Proven experience acting as a technical lead or senior engineer supporting cloud security programs in a global enterprise environment.
• Hands-on expertise securing Google Cloud Platform (GCP), with working knowledge of AWS, Azure, and OCI.
• Strong experience with…