Sr IT Security Analyst(Sr. Engineer Cloud Security )

Company Description

CREATIVITY IS OUR SUPERPOWER. It’s our heritage and it’s also our future. Because we don’t just make toys. We create innovative products and experiences that inspire fans, entertain audiences and develop children through play. Mattel is at its best when every member of our team feels respected, included, and heard—when everyone can show up as themselves and do their best work every day. We value and share an infinite range of ideas and voices that evolve and broaden our perspectives with a reach that extends into all our brands, partners, and suppliers.

The Team:

Job Description

We are seeking a skilled and motivated Senior Engineer Cloud Security to support and execute day-to-day cloud security operations across Google Cloud Platform (GCP), Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI). This role is responsible for operational cloud security monitoring, misconfiguration management, and compliance validation, working closely with Cloud Security Engineers, Network Security, and application teams.

The Senior Engineer Cloud Security applies hands-on technical skills to identify, analyze, and remediate cloud security risks while ensuring alignment with enterprise security standards, Zero Trust principles, and regulatory requirements. This role mirrors the operational depth and accountability of senior engineering roles while maintaining a strong Engineer-focused execution model.

Roles and Responsibilities

• Perform continuous security monitoring and operational reviews of cloud environments across GCP (primary), AWS, Azure, and OCI.
• Analyze and triage findings from cloud security tools such as GCP Security Command Center (SCC), AWS Security Hub, Azure Defender, and OCI Cloud Guard.
• Own remediation tracking, validation, and closure of cloud security findings in collaboration with application owners and DevOps teams.
• Support implementation and validation of cloud security controls including IAM, network security, encryption, logging, and monitoring.
• Participate in cloud architecture and design reviews to ensure security-by-design and Zero Trust principles are applied.
• Support compliance activities aligned with CIS benchmarks, NIST CSF, ISO 27001, and internal security standards.
• Maintain operational documentation, standard operating procedures (SOPs), and runbooks for cloud security processes.
• Assist in audit evidence collection, reporting, and remediation validation for internal and external audits.
• Contribute to cloud security dashboards, metrics, and reporting for operational and leadership visibility.
• Support development and enhancement of automation and scripting for cloud security baselines and controls.
• Collaborate with Network Security, IAM, and Application Security teams to ensure consistent security posture across hybrid environments.
• Participate in security incidents related to cloud platforms, including investigation, containment, and post-incident documentation.
• Continuously monitor emerging cloud threats, service changes, and best practices to improve security controls.
• Additional duties may be assigned as necessary to meet organizational needs.

Skills and Qualifications

Required:

• 5-10 years of experience in cloud, DevOps, or security operations roles.
• Hands-on experience with at least one major cloud platform (GCP, AWS, or Azure), with GCP preferred.
• Working knowledge of cloud security services and controls including IAM, networking, encryption, and logging.
• Experience analyzing findings from CSPM and native cloud security tools.
• Basic experience with infrastructure-as-code concepts and cloud automation.
• Familiarity with scripting or automation using tools such as Python, Bash, or PowerShell.
• Understanding security frameworks and standards such as CIS, NIST CSF, and ISO 27001.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to collaborate effectively with engineering, DevOps, and security teams.
• Strong written and verbal communication skills.

Preferred:

• Bachelor’s degree in computer science, Cybersecurity, Engineering, or a related discipline.
• Cloud certifications such as Google Associate Cloud Engineer, AWS Associate, or Azure Associate.
• Experience supporting compliance and audit activities in cloud environments.
• Exposure to Zero Trust, security-by-design, and cloud-native security architectures.
• Experience building or supporting cloud security automation and reporting pipelines.

Shift Timing:

• Work hours may vary, and the position may require availability during off-business hours as dictated by project needs, system changes, or security events.

Qualifications

What We’re Looking For:

• Demonstrated a growth mindset by staying curious and continuously learning, embracing challenges, and improving themselves.

Additional Information

Don’t meet every single requirement? At Mattel, we are dedicated to an inclusive workplace and a culture of belonging. If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we still encourage you to apply. You may be just the right candidate for this or other roles.

How We Work:

We are a purpose driven company aiming to empower generations to explore the wonder of childhood and reach their full potential. We live up to our purpose employing the following behaviors:

• We collaborate: Being a part of Mattel means being part of one team with shared values and common goals. Every person counts and working closely together always brings better results. Partnership is our process and our collective capabilities is our superpower.
• We innovate: At Mattel we always aim to find new and better ways to create innovative products and experiences. No matter where you work in the organization, you can always make a difference and have real impact. We welcome new ideas and value new initiatives that challenge conventional thinking.
• We execute: We are a performance-driven company. We strive for excellence and are focused on pursuing best-in-class outcomes. We believe in accountability and ownership and know that our people are at their best when they are empowered to create and deliver results.

Our Approach to Flexible Work:

We embrace a flexible work model designed to empower a culture of growth, optimism, and wellbeing, where every employee can reach their full potential. Combining purposeful in-person collaboration with flexibility, our focus is to optimize performance and drive connection for moments that matter.

Who We Are:

Mattel is a leading global toy and family entertainment company and owner of one of the most iconic brand portfolios in the world. We engage consumers and fans through our franchise brands, including Barbie, Hot Wheels, Fisher-Price, American Girl, Thomas & Friends, UNO, Masters of the Universe, Matchbox, Monster High, MEGA and Polly Pocket, as well as other popular properties that we own or license in partnership with global entertainment companies. Our offerings include toys, content, consumer products, digital and live experiences. Our products are sold in collaboration with the world’s leading retail and ecommerce companies. Since its founding in 1945, Mattel is proud to be a trusted partner in empowering generations to explore the wonder of childhood and reach their full potential.

Mattel’s award-winning workplace culture has been recognized by Forbes, Fast Company, Newsweek, Great Place to Work, TIME, and more.

Visit us at https://jobs.mattel.com/ and www.instagram.com/MattelCareers.

Mattel is an Equal Opportunity Employer where we want you to bring your authentic self to work every day. We welcome all job seekers, and all applicants will receive consideration for employment.

Videos to watch:
The Culture at Mattel
Corporate Philanthropy