Cyber Cloud Response Engineer, Vice President - Delaware

About this role YOUR TEAM The Cyber Operations team is responsible for strengthening BlackRock’s cloud security posture and supporting the detection, investigation, and response to cloud-based security events. The team partners closely with cloud engineering, detection engineering, security tooling, threat response, and operations teams to improve visibility across cloud environments, enhance response readiness, and adapt to an evolving threat landscape. Team members play a key role in protecting critical cloud infrastructure through proactive monitoring, operational excellence, and continuous security improvement. YOUR ROLE AND IMPACT As a Vice President, Cyber Operations Cloud Response Engineer, you will help strengthen BlackRock’s cloud security operations by partnering across security and engineering functions to improve visibility, detection, investigation, and response capabilities within Amazon Web Services (AWS) environments. You will operate at the intersection of cloud engineering, incident response, detection engineering, and security tooling while helping the organization identify and mitigate cloud threats and improve operational readiness. This role offers the opportunity to influence the future of cloud security operations while supporting critical business and technology platforms.

In every role at BlackRock, you'll be expected to apply sound judgement and critical thinking to solve complex problems, adapt as the business evolves, and embrace the curiosity to explore new approaches and technologies while challenging outcomes. The scope of this role also includes the following responsibilities: Enhance visibility across AWS environments by partnering with engineering and security teams to strengthen telemetry, logging, alerting, monitoring, and detection capabilities. Partner with cloud and security platform teams to ensure AWS services, workloads, and integrations provide actionable telemetry that supports effective detection, investigation, containment, and response. Investigate complex AWS security events and incidents while guiding containment, remediation, and evidence preservation activities. Collaborate with cloud security and detection engineering teams to develop, integrate, tune, and optimize security capabilities, detections, and operational workflows. Evaluate emerging cloud threats, participate in threat hunting and forensic investigations, and translate findings into enhancements to runbooks, detections, telemetry standards, and response processes. Partner across security, cloud platform, and operations teams to improve response readiness, operational resilience, and cloud security effectiveness. Support strategic cloud security initiatives that strengthen monitoring coverage, incident response capabilities, and operational maturity.

8+ years of experience in security operations, cloud security, incident response, detection engineering, or a related cybersecurity discipline. Deep hands-on experience securing, monitoring, investigating, and responding to incidents within AWS environments, including cloud-native logging, monitoring, and forensic capabilities. Experience leveraging cloud security technologies and applying containment, remediation, and evidence-preservation techniques during security incidents. Strong understanding of cloud architecture, networking, cloud identity, container security, and infrastructure automation concepts. Proven ability to influence outcomes, solve complex operational problems, and communicate effectively across security, engineering, cloud platform, and operations teams. Strong written and verbal communication skills, including the ability to explain technical risk, document findings, and influence stakeholders across multiple functions. Bachelor's degree or equivalent experience preferred; cloud security or cybersecurity certifications are advantageous. 
For Wilmington, DE Only the salary range for this position is