[Hiring] Cloud and Application security leader @GlobalFoundries

Role Description

The Cloud & Application Security Leader is responsible for defining, driving, and operationalizing security strategy across GlobalFoundries’ cloud platforms and application ecosystem. This role oversees the protection of cloud-hosted workloads, enterprise applications, and intellectual property by establishing secure architecture, governance, and engineering practices across AWS, Azure, and other platforms.

The leader will partner closely with Cloud Engineering, Application Development, Enterprise Architecture, and Cyber Defense teams to embed security into the full technology lifecycle—from design through operations—ensuring alignment with regulatory, contractual, and operational requirements. This role is critical to enabling secure cloud adoption, protecting sensitive manufacturing and R&D data, and maintaining customer trust in a highly regulated environment.

Essential Responsibilities

• Evaluates, tests, monitors, and maintains information systems (IS) and cyber security policies, procedures and systems.
• Creates, implements and oversees identity management systems to meet specific security needs and complex compliance standards.
• Ensures that IS and cyber security plans, controls, processes, standards, policies and procedures are aligned with IS standards and overall IS and cyber security.
• Identifies security risks and exposures, determines the causes of security violations and suggests procedures to halt future incidents and improve security.
• Develops techniques and procedures for conducting IS, cyber security and access and identity risk assessments and compliance audits.
• Evaluates and tests hardware, firmware and software for possible impact on system security, and investigates and resolves security incidents such as intrusion, frauds, attacks or leaks.
• Defines and executes cloud security strategy across multi-cloud (AWS, Azure, GCP). Establishes secure architecture patterns for IaaS, PaaS, and SaaS workloads.
• Partners with cloud engineering to embed preventative and detective controls across shared platforms.
• Implements and matures Cloud Security Posture Management (CSPM) for continuous monitoring and compliance validation.
• Leads secure software development practices aligned to security-by-design (SDLC integration).
• Establishes and scales capabilities for SAST, SCA, and API security.

Other Responsibilities

• Serves as key partner and liaison to CIO/CISO to drive adoption of security practices and awareness throughout GlobalFoundries.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.
• 10+ years of experience in cybersecurity, with significant focus on cloud and application security.
• Deep expertise in public cloud platforms (AWS, Azure, GCP) and secure architecture design.
• Strong understanding of full-stack security (network, infrastructure, OS, database, and applications).
• Proven experience implementing cloud security controls, IAM, and encryption standards.
• Hands-on experience with CSPM, CI/CD security, and DevSecOps practices.
• Experience working in regulated environments with strong compliance requirements.
• Demonstrated leadership experience managing cross-functional teams and complex programs.

Preferred Qualifications

• Experience in semiconductor, manufacturing, or highly regulated industries.
• Familiarity with GlobalFoundries cloud operating model and hybrid/multi-cloud environments.
• Expertise in Zero Trust architecture and modern identity security models.
• Experience with security automation, AI-driven security analytics, and advanced threat detection.
• Industry certifications such as CISSP, CCSP, AWS Security Specialty, or Azure Security Engineer.
• Experience integrating security with enterprise platforms (e.g., ServiceNow, SIEM, observability platforms).

Expected Salary Range

$147,000.00 - $248,000.00. The exact salary will be determined based on qualifications, experience, and location.