This role is part of BCG's Security Operations team within Information Security and Risk Management, focusing on Attack Surface Management. The primary responsibility is to protect BCG's global multi-cloud environment by monitoring and triaging cloud security findings. The position also involves supporting AI security coverage and collaborating with engineering and platform teams to provide actionable guidance. The team operates in a collaborative and technically rigorous environment, emphasizing clear risk ownership and continuous improvement.

• 2–4 years of experience in information security, including 2+ years in cloud security operations.
• Hands-on experience triaging findings in CNAPP or cloud security platforms.
• Working knowledge of AWS, Azure, or Google Cloud security fundamentals.
• Ability to assess exploitability, permissions, data exposure, and attack path context.
• Basic awareness of AI workload risks, including model access and inference endpoint exposure.
• Clear written communication for developer-facing findings, remediation steps, and escalation notes.
• Experience with Python, Bash, or API for triage automation and finding enrichment.

• Monitor, triage, and investigate findings across CNAPP capabilities.
• Apply contextual risk reasoning to cloud and AI-adjacent findings.
• Help identify toxic combinations across cloud, identity, workload, API, and AI service configurations.
• Investigate zero-day and critical vulnerability exposure across cloud workloads.
• Monitor AI and LLM workload risks such as exposed inference endpoints.
• Support remediation by translating findings into clear, developer-actionable guidance.
• Contribute to shift-left security by reviewing IaC and CI/CD findings.
• Write scripts, improve saved queries, and update runbooks.

• Employees at BCG are often offered comprehensive medical, dental, and vision coverage with no monthly premiums and $10 copays, plus mental-health resources (EAP, telehealth, meditation app), medical second opinions, FSAs, annual fitness reimbursement, and life and disability insurance. Compensation typically includes competitive pay, annual bonuses, generous retirement contributions with a 401(k), and robust time off, including vacation, holidays, sick leave, bereavement, and enhanced parental leave up to 22 weeks for birth parents and 14 weeks of bonding for all new parents. Additional perks include adoption and fertility assistance, transportation benefits, backup child and elder care, and flexible hybrid or remote work options.