Sr Cloud Security Architect

Why Work at Lenovo

Here at Lenovo, we believe in smarter technology for all, so we spend our time building a society that's brighter and more inclusive.

And we go big. No, not big‑huge.

We're not just a Fortune 500 company; we're one of Fortune's Most Admired. We're in 180 countries, working with 63,000 brilliant colleagues and counting. And we're known for the world's most complete portfolio of smart technology, from devices to software to infrastructure.

With our ingenuity, we help millions — not just the select few — experience our version of a smarter future.

The one thing that's missing? Well... you...

With Lenovo, we manufacture one of the world's widest portfolios of connected products, including PCs (Think Pad, Yoga, Lenovo Legion), tablets, smartphones and workstations as well as augmented and virtual reality (Mirage, Think Reality) and smart home/office solutions. We are also building an innovative portfolio of software and services which are changing the industry. Lenovo is creating the capacity and computing power for the connections that are changing business and society.

This position is for a Sr. Cloud Security Architect in the PCSD Security Center of Excellence. This is an exciting role where you will get to help create and drive cloud security strategy for a multi‑billion dollar organization that is the #1 PC maker in the world. You will also get to help design and test the security of Lenovo's Cloud Products and Services.

Job Description:

Lenovo is searching for a Sr. Cloud Security Architect to join our PCSD Product Security Team to help lead the secure design & development of Global Lenovo Cloud Products and to help oversee the operational security of Cloud products in production. The Cloud Security Architect will work with Lenovo Engineering and Product teams around the world to continuously improve the security posture of all cloud products and services in alignment with Lenovo Security policies, standards, and processes as well as local, regional and international cloud security standards and regulations.

The ideal candidate is familiar with cloud cybersecurity best practices, modern Dev Sec Ops  automation tools. The candidate should also be skilled in both AWS and Azure Cloud Security. Alibaba Ali Cloud Security experiences is a plus. We are looking for someone with a security mindset who "thinks like an attacker".

• Perform cybersecurity control and risk assessments of proposed and existing product and infrastructure architecture for compliance with Lenovo Requirements and international cloud security best practices, recommending technical, administrative and physical remediations and mitigations for identified risks and vulnerabilities.
• Develop service security and compliance requirements for SaaS multi‑tenant systems.
• Design and develop cloud security architectures and perform architecture design reviews.
• Help Design, Implement and Oversee Operation of Dev Sec Ops  solutions to secure complex CI/CD pipelines.
• Implement, maintain and improve existing industry best practices of cloud security controls such as:
• Monitoring & Logging
• Identity and Access Management
• Encryption
• Data Security & Privacy
• Incident Response & Forensics
• WAF, RASP, SIEM, IDS/IPS, etc.
• Provide guidance to R&D and Product Management on defining and prioritizing development of secure SaaS offerings.
• Prepare and deliver training and security awareness activities to the Engineering teams.
• Acquire relevant knowledge, remain up to date, attend cloud security conferences and be involved with the cloud security community.
• Drive and help lead cloud security strategy, tools, training, processes, and tactics.

• 5+ years of experience with cloud security (security researcher, security engineer, security architect).
• Bachelor's Degree in Computer Science or related field, or additional 5+ years of cybersecurity experience.
• 3+ years experience with AWS and Azure.
• 2+ years experience in:
  Infrastructure security, security SDLC and secure SaaS practices, Cloud Product Threat modeling experience.

• Experience doing code review for…