Senior Attack Surface Cloud Security Engineer

Key Responsibilities

• Define and implement enterprise security architecture strategy across global JLL infrastructure
• Identify, assess, and mitigate attack surfaces across cloud, on-prem, IoT, and SaaS environments
• Provide security leadership for endpoint, network, application, and cloud security domains
• Design and enforce security controls for Azure (primary) and AWS (secondary) environments
• Develop security architecture roadmaps, standards, patterns, and reference frameworks
• Evaluate and implement third-party security solutions and tools
• Collaborate with global IT, business, and architecture teams for security alignment
• Conduct risk assessments and recommend mitigation strategies for enterprise systems
• Ensure compliance with SOC2, internal policies, and regulatory requirements
• Guide identity and access management architecture (Okta, ADFS, PingFederate, etc.)
• Oversee firewall, VPN, certificate, and encryption/key management frameworks
• Lead security governance across multiple parallel initiatives and global stakeholders
• Translate security risks into business-impact recommendations for leadership
• Support change management and security transformation initiatives
• Monitor evolving cyber threats and update enterprise security strategy accordingly