Job Description

CREATIVITY IS OUR SUPERPOWER. It’s our heritage and it’s also our future. Because we don’t just make toys. We create innovative products and experiences that inspire fans, entertain audiences and develop children through play. Mattel is at its best when every member of our team feels respected, included, and heard—when everyone can show up as themselves and do their best work every day. We value and share an infinite range of ideas and voices that evolve and broaden our perspectives with a reach that extends into all our brands, partners, and suppliers.

Cloud Security Tech lead is responsible for leading and delivering day-to-day cloud security operations across Google Cloud Platform (GCP), Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI). This role combines hands-on technical execution with technical leadership, ensuring cloud security risks are accurately identified, prioritized, and remediated in alignment with business risk, Zero Trust principles, and regulatory requirements.

Cloud Security Tech lead provides direct technical leadership and guidance to cloud security engineers and analysts while partnering closely with Security Operations, IT, Engineering, and Application teams to drive remediation accountability and continuous improvement. Operating within a global delivery model, this role serves as a key execution and escalation point to ensure consistency, scalability, and resilience of the organization’s cloud security program.

In addition to operational ownership, cloud security strategy, tooling optimization, automation, and analytics, ensuring the cloud security capability evolves alongside emerging threats, technologies, and compliance requirements.

Roles and Responsibilities

Skill:GCP/AWS/Azure/OCI security operations, CSPM (SCC, Security Hub, Defender, Cloud Guard), IAM & network controls, misconfiguration remediation

• Provide direct technical leadership and day-to-day oversight of cloud security operations across GCP (primary), AWS, Azure, and OCI.
• Own and manage cloud security operations including configuration reviews, misconfiguration detection, prioritization, remediation tracking, and validation.
• Serve as a key execution partner and escalation point for cloud security initiatives, ensuring alignment with enterprise security strategy and priorities.
• Design, optimize, and maintain cloud security review and monitoring strategies using native cloud security tools and CSPM platforms.
• Translate large-scale cloud security findings into actionable risk intelligence through dashboards, metrics, and executive reporting.
• Drive risk-based prioritization of cloud security issues using threat intelligence, asset criticality, exposure, and business impact.
• Partner with application owners, DevOps, and platform teams to provide clear remediation guidance and influence timely risk reduction decisions.
• Ensure secure implementation and continuous improvement of IAM, network segmentation, encryption, logging, and monitoring controls across cloud platforms.
• Lead and support secure architecture and design reviews for new and existing cloud workloads.
• Champion Zero Trust principles and security-by-design practices across cloud environments.
• Develop, enhance, and maintain automation and scripting to detect misconfigurations and enforce cloud security baselines.
• Integrate CSPM and cloud security tooling with SIEM and SOAR platforms to improve visibility and response.
• Monitor emerging cloud security threats, vulnerabilities, and regulatory changes, incorporating lessons learned into improved controls and processes.
• Develop, maintain, and continuously improve cloud security runbooks, playbooks, and operational documentation.
• Mentor and develop cloud security engineers and analysts, strengthening technical depth and operational maturity.
• Provide advanced escalation support for complex cloud security findings, tooling issues, and remediation challenges.
• Work hours may vary, and the position may require availability during off-business hours due to incidents, system changes, or project needs.
• Additional duties may be assigned as necessary to meet the ongoing needs of the organization.

Qualifications

Skills and Qualifications

Required:

• 9+ years of experience in cloud security engineering, DevSecOps, or cloud security operations.
• Proven experience acting as a technical lead or senior engineer supporting cloud security programs in a global enterprise environment.
• Hands-on expertise securing Google Cloud Platform (GCP), with working knowledge of AWS, Azure, and OCI.
• Strong experience with native cloud security tools such as GCP Security Command Center, AWS Security Hub, Azure Defender for Cloud, and OCI Cloud Guard.
• Deep understanding of IAM, network security, encryption, key management, logging, and monitoring across cloud platforms.
• Experience implementing and operationalizing CSPM, CWPP, and cloud IAM solutions.
• Hands-on experience with infrastructure-as-code security using Terraform, CloudFormation, or equivalent tools.
• Strong scripting and automation skills using Python, Bash, PowerShell, or cloud-native tooling.
• Experience supporting compliance initiatives aligned with CIS benchmarks, NIST CSF, and ISO 27001.
• Strong analytical, leadership, and stakeholder communication skills.
• Ability to support after-hours coordination or incident response activities as needed.

Preferred:

• Bachelor’s degree in computer science, Cybersecurity, Information Technology, or equivalent practical experience.
• Cloud security certifications such as Google Professional Cloud Security Engineer, AWS Certified Security – Specialty, or Azure Security Engineer Associate.
• Security certifications such as CISSP, CCSP, or CISM.
• Experience integrating cloud security tooling with enterprise SIEM and SOAR platforms.
• Familiarity with Zero Trust architecture and cloud-native security design patterns.

Shift Timing:

• Work hours may vary, and the position may require availability during off-business hours as dictated by project needs, system changes, or security events.

Additional Information

Don’t meet every single requirement? At Mattel, we are dedicated to an inclusive workplace and a culture of belonging. If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we still encourage you to apply. You may be just the right candidate for this or other roles.

How We Work:

We are a purpose driven company aiming to empower generations to explore the wonder of childhood and reach their full potential. We live up to our purpose employing the following behaviors:

• We collaborate: Being a part of Mattel means being part of one team with shared values and common goals. Every person counts and working closely together always brings better results. Partnership is our process and our collective capabilities is our superpower.
• We innovate: At Mattel we always aim to find new and better ways to create innovative products and experiences. No matter where you work in the organization, you can always make a difference and have real impact. We welcome new ideas and value new initiatives that challenge conventional thinking.
• We execute: We are a performance-driven company. We strive for excellence and are focused on pursuing best-in-class outcomes. We believe in accountability and ownership and know that our people are at their best when they are empowered to create and deliver results.

Our Approach to Flexible Work:

We embrace a flexible work model designed to empower a culture of growth, optimism, and wellbeing, where every employee can reach their full potential. Combining purposeful in-person collaboration with flexibility, our focus is to optimize performance and drive connection for moments that matter.

Who We Are:

Mattel is a leading global toy and family entertainment company and owner of one of the most iconic brand portfolios in the world. We engage consumers and fans through our franchise brands, including Barbie, Hot Wheels, Fisher-Price, American Girl, Thomas & Friends, UNO, Masters of the Universe, Matchbox, Monster High, MEGA and Polly Pocket, as well as other popular properties that we own or license in partnership with global entertainment companies. Our offerings include toys, content, consumer products, digital and live experiences. Our products are sold in collaboration with the world’s leading retail and ecommerce companies. Since its founding in 1945, Mattel is proud to be a trusted partner in empowering generations to explore the wonder of childhood and reach their full potential.