BCG—Global IT Security Engineer Senior Specialist

Job description

Description: Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do As a Senior IT Security Engineer, you will help strengthen BCG’s global cloud security capabilities, with a particular focus on Cloud Security Posture Management (CSPM) and Cloud-Native Application Protection Platform (CNAPP) solutions. You will contribute hands-on technical expertise across the implementation, configuration, operation, and continuous improvement of these capabilities. Working in a global environment, you will take ownership of complex security engineering activities and collaborate with teams across BCG to deliver reliable, scalable solutions. Your work will include HashiCorp Vault, Terraform, and AWS CloudHSM, applying automation and security engineering practices to protect cloud environments and services. - Implement, configure, operate, and continuously improve CSPM and CNAPP capabilities. - Engineer and maintain secure solutions using HashiCorp Vault and AWS CloudHSM. - Build and maintain infrastructure-as-code solutions using Terraform. - Troubleshoot complex cloud security issues and drive them through to effective resolution. - Identify opportunities to strengthen security controls, automation, reliability, and operational processes. - Deliver high-quality technical solutions while considering security risks and broader business requirements. - Collaborate with global teams to integrate and support cloud security capabilities across BCG. What You'll Bring - 3–5 years of relevant experience in cloud security or security engineering. - Hands-on experience implementing and operating CSPM and CNAPP capabilities. - Strong working knowledge of HashiCorp Vault, Terraform, and AWS CloudHSM. - Troubleshooting capability across AWS, Azure, and GCP cloud environments. - Ability to analyze complex security issues and develop practical, effective solutions. - Experience delivering reliable technical solutions while managing changing priorities. - Strong communication and collaboration skills for working effectively across global teams. Who You'll Work With You will work within BCG’s global technology environment, partnering with security stakeholders and developers and engineers across the organization. You will collaborate closely with these teams to integrate cloud security capabilities, troubleshoot technical challenges, and strengthen security solutions across BCG’s cloud environments. Additional info At BCG, our people and relationships are at the heart of everything we do. We believe that in-person collaboration plays an important role in our culture, mentorship, and professional development. For this role, you will generally be expected to work from a BCG office or in person with clients on a regular basis (typically around 50% of working time), depending on business needs and in line with local policies and practices. We aim to provide a dynamic and collaborative environment that fosters connection and teamwork. The responsibilities and requirements have been calibrated to the confirmed CS3 cohort, including independent ownership, technical expertise, problem solving, quality delivery, and collaboration expectations Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify. Skills: cloud security posture management, cloud-native application protection platform, hashicorp vault, terraform, aws cloudhsm, cloud security automation, cloud security troubleshooting, infrastructure as code, cloud security controls, security engineering, azure cloud security, gcp cloud security, security process improvement, technical solution delivery, collaboration, stakeholder management, problem solving, communication