<p><b>Department:</b> Digital Platforms<br><b>Reports To:</b> Chief Technology Officer (CTO)<br><b>Location:</b> Doha</p><p></p><h1><b>Position Description:</b></h1><p></p><p>East-West Digital (EWD) is seeking a highly skilled <b>Cybersecurity Operations </b>expert to define, implement, and continuously strengthen the company’s cloud security strategy across Google Cloud, AWS, and Azure. This role serves as the central reference point for all matters related to cloud privacy, data protection, defensive security, and secure solution design.</p><p>Working side-by-side with architecture, development, and product teams, the Cybersecurity Operations expert ensures that all cloud-based products are designed and delivered following a rigorous Privacy &amp; Security by Design approach. The position includes responsibilities across threat modelling, internal security assessments, incident response, automation of controls, and continuous posture management.</p><p>This is a senior, high-impact role within EWD’s cloud platform domain.</p><p></p><p></p><h1><b>Jobs to Be Done:</b></h1><p>1. Define and govern EWD’s cloud security framework:</p><ul><li>Establish best practices for cloud security and privacy across all EWD products.</li><li>Maintain and enhance the organization’s cloud security posture.</li><li>Develop policies, automated controls, and preventive guardrails across cloud environments.</li></ul><p></p><p>2. Guide architecture and development teams:</p><ul><li>Ensure Security by Design principles are applied throughout the full product lifecycle.</li><li>Provide expert guidance, architectural reviews, and periodic internal audits.</li><li>Contribute to secure architecture patterns, design decisions, and implementation strategies.</li></ul><p></p><p>3. Perform continuous security evaluation:</p><ul><li>Identify, analyze, and remediate vulnerabilities across projects.</li><li>Conduct advanced threat modelling and risk assessments.</li><li>Perform internal ethical hacking when needed to validate security controls.</li></ul><p></p><p>4. Lead detection and incident response operations:</p><ul><li>Design and implement logging, monitoring, and alerting strategies.</li><li>Detect threats using native cloud security services.</li><li>Lead incident response, recovery, and post-incident forensics.</li></ul><p></p><p>5. Ensure governance, compliance, and architectural robustness</p><ul><li>Ensure compliance with internal standards, regulatory requirements, and cloud benchmarks.</li><li>Conduct architectural reviews to identify gaps and optimize cost–security–complexity trade-offs.</li><li>Support centralized management of GCP projects, AWS accounts, and Azure subscriptions.</li></ul><p></p><h1><b>Requirements:</b></h1><p></p><p>Education: </p><ul><li>Bachelor’s degree in Computer Science, Engineering, or a related field.</li><li>A Master’s degree is a plus.</li></ul><p></p><p>Experience:</p><ul><li>More than 5 years of experience in cloud security, cloud engineering, or related roles.</li><li>Extensive hands-on experience with Google Cloud and AWS; Azure experience is a plus.</li><li>Proven track record implementing DevSecOps, security automation, CI/CD pipelines, and incident response.</li><li>Previous experience in the energy or utilities sector is advantageous.</li></ul><p></p><p></p><h1><b>Skills and Competencies</b></h1><p></p><h2><b>Cloud Security &amp; Privacy</b></h2><ul><li>Strong understanding of data classification, privacy, and protection mechanisms.</li><li>Expertise in encryption (in transit and at rest), key management, and secret protection.</li><li>Understanding of secure internet protocols and security operations.</li><li>Ability to balance cost, security, and deployment complexity.</li><li>Deep knowledge of the Cloud Shared Responsibility Model.</li></ul><p></p><h2><b>Identity &amp; Access Management</b></h2><ul><li>Experience designing and implementing authentication and authorization for cloud resources.</li><li>Advanced familiarity with:</li><li>(<b>MUST</b>) Google Cloud: IAM, IAM Conditions, Cloud Identity, Access Context Manager</li><li>(<b>NICE TO HAVE</b>) AWS: Identity Center, Directory Service, IAM Roles, Permission Sets, Control Tower</li><li>(<b>NICE TO HAVE</b>) Azure: Entra ID, Conditional Access, PIM, RBAC</li></ul><p></p><h2><b>Detection, Monitoring &amp; Incident Response</b></h2><ul><li>Proficiency with tools such as SCC, Chronicle, Cloud Logging &amp; Monitoring, GuardDuty, Security Hub, Inspector, Sentinel, Azure Monitor, etc. (at least one of them)</li><li>Ability to design logging architectures, dashboarding, alerts, and anomaly detection.</li><li>Strong incident response and threat-mitigation skills.</li></ul><p></p><h2><b>Network &amp; Application Security</b></h2><ul><li>Experience with edge and application protection (e.g. Cloud Armor, IAP, AWS WAF, AWS Network Firewall, Azure Front Door, etc.).</li><li>Understanding of Zero-Trust principles and secure connectivity patterns.</li></ul><p></p><h2><b>Data Protection</b></h2><ul><li>Experience with tools such us Cloud KMS, Secret Manager, CMEK, AWS KMS/CloudHSM, Azure Key Vault, VPC-SC, DLP frameworks, and confidential computing (at least one of them).</li></ul><p></p><h2><b>Governance &amp; Compliance</b></h2><ul><li>Knowledge of posture management, CIS benchmarks, regulatory frameworks, SCPs, Assured Workloads, Blueprints, etc.</li><li>Ability to perform end-to-end architecture reviews with a security focus.</li></ul><p></p><h2><b>Soft Skills</b></h2><ul><li>Structured and innovative mindset.</li><li>Strong team spirit and relationship-building skills.</li><li>Ability to manage complex situations with sound judgment.</li><li>Resilience and composure under pressure.</li><li>Entrepreneurial, proactive, and highly collaborative.</li></ul><h2></h2><h2>Key Performance Indicators (KPIs):</h2><ul><li>Compliance level with EWD’s cloud security framework across all products.</li><li>Reduction of vulnerabilities and security findings over time.</li><li>Mean Time to Detect (MTTD) and Mean Time to Resolve (MTTR) for security incidents.</li><li>Adoption rate of automated security controls across teams.</li><li>Quality and frequency of internal security audits.</li><li>Improvement of EWD’s cloud security posture metrics (SCC scores, CIS benchmarks, etc.).</li></ul><h3></h3><p></p><h2>Why Join Us?</h2><p>At East-West Digital, you will help shape the security foundation of a next-generation, cloud-native platform serving real-world energy applications and global customers. You will work with cutting-edge cloud and AI technologies, drive high-impact decisions, and collaborate with multidisciplinary teams in a dynamic, multicultural environment.</p><p>East-West Digital is building the future of digital energy solutions from Doha, and this role places you at the core of that transformation—combining innovation, technical excellence, and meaningful impact across the entire organization.</p><p></p><p></p><p style="text-align:inherit;"></p><p style="text-align:left;"><b>Mobility Information</b></p><p style="text-align:left;">Please note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country.</p><p style="text-align:inherit;"></p><p style="text-align:left;"><b>Job Posting End Date:</b></p>February-15-2026

<p>Avangrid is a leading sustainable energy company transitioning America toward a clean and connected future headquartered in Orange, CT, and has a footprint in 24 states with $40 billion in assets. Our primary businesses are Networks, which serves 3.3 million electric and natural gas customers in the Northeast, and Renewables, the third-largest renewable energy company in the U.S. with a diverse onshore and offshore renewable energy portfolio. With more than 7,000 employees, Avangrid has built a culture that blends diversity, equity and inclusion guided by the company&rsquo;s ESG+F framework and the UN Sustainable Development Goals. This has led to recognition by JUST Capital in 2021 and 2022 as one of America&rsquo;s best corporate citizens and second in utilities for our commitment to the environment and the communities we serve. Avangrid has been named one of the World&rsquo;s Most Ethical Companies for four consecutive years by the Ethisphere Institute.</p>

Cybersecurity Operations

<p><b>Department:</b>&nbsp;Digital Platforms<br><b>Reports To:</b>&nbsp;Chief Technology Officer (CTO)<br><b>Location:</b>&nbsp;Doha</p><p></p><h1><b>Position Description:</b></h1><p></p><p>East-West Digital (EWD) is seeking a highly skilled <b>Cybersecurity Operations </b>expert to define, implement, and continuously strengthen the company’s cloud security strategy across Google Cloud, AWS, and Azure. This role serves as the central reference point for all matters related to cloud privacy, data protection, defensive security, and secure solution design.</p><p>Working side-by-side with architecture, development, and product teams, the Cybersecurity Operations expert ensures that all cloud-based products are designed and delivered following a rigorous Privacy &amp; Security by Design approach. The position includes responsibilities across threat modelling, internal security assessments, incident response, automation of controls, and continuous posture management.</p><p>This is a senior, high-impact role within EWD’s cloud platform domain.</p><p></p><p></p><h1><b>Jobs to Be Done:</b></h1><p>1. Define and govern EWD’s cloud security framework:</p><ul><li>Establish best practices for cloud security and privacy across all EWD products.</li><li>Maintain and enhance the organization’s cloud security posture.</li><li>Develop policies, automated controls, and preventive guardrails across cloud environments.</li></ul><p></p><p>2. Guide architecture and development teams:</p><ul><li>Ensure Security by Design principles are applied throughout the full product lifecycle.</li><li>Provide expert guidance, architectural reviews, and periodic internal audits.</li><li>Contribute to secure architecture patterns, design decisions, and implementation strategies.</li></ul><p></p><p>3. Perform continuous security evaluation:</p><ul><li>Identify, analyze, and remediate vulnerabilities across projects.</li><li>Conduct advanced threat modelling and risk assessments.</li><li>Perform internal ethical hacking when needed to validate security controls.</li></ul><p></p><p>4. Lead detection and incident response operations:</p><ul><li>Design and implement logging, monitoring, and alerting strategies.</li><li>Detect threats using native cloud security services.</li><li>Lead incident response, recovery, and post-incident forensics.</li></ul><p></p><p>5. Ensure governance, compliance, and architectural robustness</p><ul><li>Ensure compliance with internal standards, regulatory requirements, and cloud benchmarks.</li><li>Conduct architectural reviews to identify gaps and optimize cost–security–complexity trade-offs.</li><li>Support centralized management of GCP projects, AWS accounts, and Azure subscriptions.</li></ul><p></p><h1><b>Requirements:</b></h1><p></p><p>Education:&nbsp;</p><ul><li>Bachelor’s degree in Computer Science, Engineering, or a related field.</li><li>A Master’s degree is a plus.</li></ul><p></p><p>Experience:</p><ul><li>More than 5 years of experience in cloud security, cloud engineering, or related roles.</li><li>Extensive hands-on experience with Google Cloud and AWS; Azure experience is a plus.</li><li>Proven track record implementing DevSecOps, security automation, CI/CD pipelines, and incident response.</li><li>Previous experience in the energy or utilities sector is advantageous.</li></ul><p></p><p></p><h1><b>Skills and Competencies</b></h1><p></p><h2><b>Cloud Security &amp; Privacy</b></h2><ul><li>Strong understanding of data classification, privacy, and protection mechanisms.</li><li>Expertise in encryption (in transit and at rest), key management, and secret protection.</li><li>Understanding of secure internet protocols and security operations.</li><li>Ability to balance cost, security, and deployment complexity.</li><li>Deep knowledge of the Cloud Shared Responsibility Model.</li></ul><p></p><h2><b>Identity &amp; Access Management</b></h2><ul><li>Experience designing and implementing authentication and authorization for cloud resources.</li><li>Advanced familiarity with:</li><li>(<b>MUST</b>) Google Cloud: IAM, IAM Conditions, Cloud Identity, Access Context Manager</li><li>(<b>NICE TO HAVE</b>) AWS: Identity Center, Directory Service, IAM Roles, Permission Sets, Control Tower</li><li>(<b>NICE TO HAVE</b>) Azure: Entra ID, Conditional Access, PIM, RBAC</li></ul><p></p><h2><b>Detection, Monitoring &amp; Incident Response</b></h2><ul><li>Proficiency with tools such as SCC, Chronicle, Cloud Logging &amp; Monitoring, GuardDuty, Security Hub, Inspector, Sentinel, Azure Monitor, etc. (at least one of them)</li><li>Ability to design logging architectures, dashboarding, alerts, and anomaly detection.</li><li>Strong incident response and threat-mitigation skills.</li></ul><p></p><h2><b>Network &amp; Application Security</b></h2><ul><li>Experience with edge and application protection (e.g. Cloud Armor, IAP, AWS WAF, AWS Network Firewall, Azure Front Door, etc.).</li><li>Understanding of Zero-Trust principles and secure connectivity patterns.</li></ul><p></p><h2><b>Data Protection</b></h2><ul><li>Experience with tools such us Cloud KMS, Secret Manager, CMEK, AWS KMS/CloudHSM, Azure Key Vault, VPC-SC, DLP frameworks, and confidential computing (at least one of them).</li></ul><p></p><h2><b>Governance &amp; Compliance</b></h2><ul><li>Knowledge of posture management, CIS benchmarks, regulatory frameworks, SCPs, Assured Workloads, Blueprints, etc.</li><li>Ability to perform end-to-end architecture reviews with a security focus.</li></ul><p></p><h2><b>Soft Skills</b></h2><ul><li>Structured and innovative mindset.</li><li>Strong team spirit and relationship-building skills.</li><li>Ability to manage complex situations with sound judgment.</li><li>Resilience and composure under pressure.</li><li>Entrepreneurial, proactive, and highly collaborative.</li></ul><h2></h2><h2>Key Performance Indicators (KPIs):</h2><ul><li>Compliance level with EWD’s cloud security framework across all products.</li><li>Reduction of vulnerabilities and security findings over time.</li><li>Mean Time to Detect (MTTD) and Mean Time to Resolve (MTTR) for security incidents.</li><li>Adoption rate of automated security controls across teams.</li><li>Quality and frequency of internal security audits.</li><li>Improvement of EWD’s cloud security posture metrics (SCC scores, CIS benchmarks, etc.).</li></ul><h3></h3><p></p><h2>Why Join Us?</h2><p>At East-West Digital, you will help shape the security foundation of a next-generation, cloud-native platform serving real-world energy applications and global customers. You will work with cutting-edge cloud and AI technologies, drive high-impact decisions, and collaborate with multidisciplinary teams in a dynamic, multicultural environment.</p><p>East-West Digital is building the future of digital energy solutions from Doha, and this role places you at the core of that transformation—combining innovation, technical excellence, and meaningful impact across the entire organization.</p><p></p><p></p><p></p><p><b>Mobility Information</b></p><p>Please note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country.</p><p></p><p><b>Job Posting End Date:</b></p>February-15-2026

Cybersecurity Operations

About the Job

About the Company

Iberdrola

Similar Jobs

Global IT Security Expert _ IAM

Global IT Security Expert _ IAM

Cyber Security Engineer

Cyber Security Engineer

Cloud Security, Sr Engineer

Cloud Security, Sr Engineer

Senior Cyber Security Engineer

Senior Cyber Security Engineer

Cyber Security Engineer

Cyber Security Engineer

Cybersecurity and Data Protection Manager

Cybersecurity and Data Protection Manager

Senior Cybersecurity Engineer

Senior Cybersecurity Engineer

Operational Technology (OT) Security Expert

Operational Technology (OT) Security Expert

Cyber Security Architecture Lead

Cyber Security Architecture Lead

Cyber security, Product Security Engineer R&D

Cyber security, Product Security Engineer R&D