Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Senior Cloud Security Consultant role.
Rezi rewrites your resume against Aon Corporation's job description. Free.

Tailor your resume to this Senior Cloud Security Consultant role.
Rezi rewrites your resume against Aon Corporation's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Senior Cloud Security Consultant posting at Aon Corporation — free, in seconds.

Don't guess if your resume is good enough.
See how it scores against the Senior Cloud Security Consultant posting at Aon Corporation — free, in seconds.
About the Role
The Digital M&A Advisory practice advises private equity investors, infrastructure funds, and corporate clients on technology, IT, cyber, and digital risks across acquisitions, portfolio companies, and strategic transformation initiatives. This role is for a technically strong cloud security specialist with hands-on experience in Microsoft Azure and Amazon Web Services (AWS). You will act as the technical cloud security lead, assessing cloud security posture, identifying exposures, and translating technical findings into business and investment implications.
Responsibilities
- Leading the cloud security elements of engagements across private equity and corporate clients.
- Leading technical cloud security reviews of Azure and AWS environments as part of cyber due diligence, technical review, and portfolio company engagements.
- Assessing cloud tenancy and account architecture, including Azure management groups, subscriptions, and landing zones, and AWS Organizations, accounts, OUs, and Control Tower set-up.
- Reviewing identity and access management across cloud and hybrid environments.
- Evaluating cloud network architecture and segmentation.
- Assessing cloud security configuration and posture using native and third-party tooling against CIS Benchmarks and Well-Architected security guidance.
- Reviewing data protection controls, including encryption, key management, secrets management, storage exposure, and backup resilience.
- Assessing logging, monitoring, and detection capabilities.
- Reviewing infrastructure-as-code, DevSecOps practices, and CI/CD pipeline security.
- Translating technical findings into prioritized, commercially relevant risks, remediation roadmaps, and cost estimates.
- Producing high-quality reports, presentations, and executive briefings.
- Managing technical workstreams and supporting engagement delivery across multiple concurrent projects.
- Working closely with colleagues across technology, cyber, M&A, and risk advisory disciplines.
- Contributing to the development of the team's technical review methodologies, cloud assessment tooling, and market offerings.
- Supporting client engagements across the UK and EMEA.
Requirements
- Demonstrable experience in cloud security engineering, cloud architecture, security consulting, or a related technical role.
- Strong, hands-on knowledge of Microsoft Azure and AWS, including technical set-up, tenancy/account structure, and security architecture.
- Experience crafting, implementing, or assessing identity and access management (Entra ID, AWS IAM, PIM/PAM, conditional access, federation and SSO).
- Experience crafting, implementing, or assessing landing zones, management groups, AWS Organizations, and guardrails (Azure Policy, SCPs).
- Experience crafting, implementing, or assessing cloud network security and hybrid connectivity.
- Experience crafting, implementing, or assessing cloud security posture management and workload protection (CSPM/CWPP/CNAPP).
- Experience crafting, implementing, or assessing logging, monitoring, and threat detection (Sentinel, Defender, GuardDuty, CloudTrail).
- Experience crafting, implementing, or assessing encryption, key, and secrets management.
- Experience crafting, implementing, or assessing container and Kubernetes security (AKS, EKS).
- Experience crafting, implementing, or assessing infrastructure-as-code (Terraform, Bicep/ARM, CloudFormation) and DevSecOps.
- Experience crafting, implementing, or assessing cloud backup, resilience, and disaster recovery.
- Familiarity with CIS Benchmarks for Azure and AWS.
- Familiarity with Microsoft Cloud Security Benchmark.
- Familiarity with AWS and Azure Well-Architected Frameworks (Security Pillar).
- Familiarity with Cloud Adoption Frameworks.
- Familiarity with NIST CSF.
- Familiarity with ISO 27001 / 27017.
- Familiarity with CSA Cloud Controls Matrix.
- Understanding of attack paths and common cloud attack techniques.
- Ability to read and interpret cloud configuration exports, scripts, and tooling outputs.
- Experience identifying and assessing cloud and cyber risks within complex environments.
- Ability to communicate technical findings and business implications to both technical and non-technical stakeholders.
- Strong analytical and problem-solving skills.
- Commercial awareness and the ability to understand business implications of technology and security decisions.
- Excellent written and verbal communication skills.
- Experience managing technical workstreams and contributing to successful project delivery.
- Strong stakeholder management and presentation skills.
- Ability to engage effectively with both technical teams and senior business executives.
- Experience developing positive client relationships.
- Comfortable working within multidisciplinary and global teams and fast-paced consulting environments.
- Ability to manage multiple engagements and competing priorities.
- Highly organized with strong attention to detail and quality.
- Experience with Google Cloud Platform or multi-cloud environments.
- Exposure to attack path analysis, exposure management, or cyber risk quantification platforms.
- Experience of cloud penetration testing, red teaming, or security assurance reviews.
- Experience supporting cloud migrations, tenant-to-tenant migrations, or separation/integration programs.
- Experience working with private equity-backed businesses or large corporate organizations.
- Experience mentoring junior team members or supporting team development initiatives.
- Interest in business development and market-facing activities.
- Experience or interest in line management.
- Interest in supporting client relationship management.
Skills
- Microsoft Azure
- Amazon Web Services (AWS)
- Cloud Security Engineering
- Cloud Architecture
- Security Consulting
- Identity and Access Management (IAM)
- Microsoft Entra ID
- AWS IAM
- Privileged Access Management (PAM)
- Conditional Access
- Federation
- Single Sign-On (SSO)
- Landing Zones
- Management Groups
- AWS Organizations
- Guardrails
- Azure Policy
- Service Control Policies (SCPs)
- Cloud Network Security
- Hybrid Connectivity
- Cloud Security Posture Management (CSPM)
- Cloud Workload Protection Platforms (CWPP)
- Cloud-Native Application Protection Platforms (CNAPP)
- Logging
- Monitoring
- Threat Detection
- Microsoft Sentinel
- Microsoft Defender for Cloud
- AWS GuardDuty
- AWS CloudTrail
- Encryption
- Key Management
- Secrets Management
- Container Security
- Kubernetes Security
- Azure Kubernetes Service (AKS)
- Amazon Elastic Kubernetes Service (EKS)
- Infrastructure-as-Code (IaC)
- Terraform
- Bicep
- ARM Templates
- AWS CloudFormation
- DevSecOps
- CI/CD Pipeline Security
- Cloud Backup
- Resilience
- Disaster Recovery
- CIS Benchmarks
- Microsoft Cloud Security Benchmark
- AWS Well-Architected Framework
- Azure Well-Architected Framework
- Cloud Adoption Frameworks
- NIST CSF
- ISO 27001
- ISO 27017
- CSA Cloud Controls Matrix
- Attack Path Analysis
- Privilege Escalation
- Misconfiguration Exploitation
- Credential Compromise
- PowerShell
- Azure CLI
- AWS CLI
- Kusto Query Language (KQL)
- Risk Assessment
- Problem-Solving
- Stakeholder Management
- Presentation Skills
- Client Relationship Management
- Teamwork
- Google Cloud Platform (GCP)
- Multi-cloud environments
- Cyber Risk Quantification
- Cloud Penetration Testing
- Red Teaming
- Security Assurance
- Cloud Migration
- Tenant-to-Tenant Migration
- Separation Programs
- Integration Programs
- Microsoft Certified: Azure Security Engineer Associate (AZ-500)
- Microsoft Certified: Cybersecurity Architect Expert (SC-100)
- AWS Certified Security – Specialty
- AWS Certified Solutions Architect
- Certified Cloud Security Professional (CCSP)
- Certified Information Systems Security Professional (CISSP)
- Certified Cloud Security Knowledge (CCSK)
Location
- London
Work Type
- Full-time
Experience Level
- Senior
About the Company
- Headquartered in London, Aon Plc is a leading global professional services firm providing a broad range of risk, retirement, and health solutions.
- Our 50,000 colleagues in 120 countries empower results for clients by using proprietary data and analytics to deliver insights that reduce volatility and improve performance.
Equal Opportunity
- Aon is an equal opportunities employer.
- Aon's recruitment and selection policy ensures the best possible skill mix of colleagues and the highest quality candidates are appointed using objective job-related criteria.