Senior Cloud Security Engineer

The Security Operations team is at the heart of information security at Tricentis, monitoring the digital landscape for anomalous activity and taking action when needed. We are seeking a Senior Cloud Security Engineer to help drive the security strategy, architecture, and continuous improvement of our cloud and SaaS environments.

The ideal candidate is a highly experienced security professional who can independently lead complex security initiatives, influence technical decisions across the organization, and partner with engineering teams to build secure-by-design solutions at scale. This role combines hands-on technical execution with strategic leadership in a fast-paced, cloud-first environment.

Responsibilities

• Design, implement, and continuously improve security controls, detection capabilities, and automation across AWS and Azure environments.
• Serve as a subject matter expert on cloud security architecture, driving secure design principles and best practices.
• Lead security assessments, threat modeling, and risk analysis for cloud infrastructure, applications, and third-party SaaS platforms.
• Develop and enhance cloud security monitoring, detection engineering, and incident response capabilities.
• Partner with Engineering, DevOps, IT, and Product teams to integrate security controls throughout the software development lifecycle.
• Identify opportunities to automate security processes and drive scalable, sustainable solutions.
• Lead remediation efforts for security findings and provide technical guidance to stakeholders.
• Investigate and respond to security incidents, performing root cause analysis and recommending preventative measures.
• Mentor junior team members and contribute to the development of security standards, policies, and operational processes.
• Stay current on emerging threats, attack techniques, and cloud security trends, proactively recommending improvements.

Required Skills & Qualifications

• 5+ years of experience in Information Security, including significant hands-on experience securing AWS and/or Azure environments.
• Deep understanding of cloud security architecture, identity and access management, network security, and security monitoring.
• Strong knowledge of common attack methodologies, threat actors, and modern mitigation techniques.
• Experience implementing and managing cloud-native security services, security tooling, and automated controls.
• Proven experience leading security initiatives and driving cross-functional projects.
• Strong analytical, troubleshooting, and problem-solving skills.
• Experience communicating complex security concepts to technical and non-technical audiences, including leadership stakeholders.
• Ability to work independently, prioritize competing initiatives, and make sound security decisions in ambiguous situations.
• High level of integrity, accountability, and professional judgment.

Preferred Qualifications

• Experience developing security automation using Python, PowerShell, Terraform, or similar technologies.
• Experience with SIEM platforms, detection engineering, log management, and threat hunting.
• Experience configuring and managing EDR, vulnerability management, and endpoint security solutions.
• Strong background in incident response, digital forensics, and security investigations.
• Experience securing modern DevOps environments, including CI/CD pipelines, secrets management, infrastructure as code, and containerized applications.
• Experience with Kubernetes, Docker, serverless technologies, and cloud-native architectures.
• Experience working within compliance frameworks such as SOC 2, ISO 27001, PCI-DSS, GDPR, or similar standards.
• Industry certifications such as AWS Security Specialty, Azure Security Engineer Associate, CISSP, CCSP, GIAC, or equivalent.

What Success Looks Like

• Acts as a trusted advisor for cloud security decisions across the organization.
• Drives measurable improvements in security posture through automation, detection coverage, and risk reduction.
• Successfully leads complex security projects from design through implementation.
• Helps establish security best practices and elevates the overall maturity of the security program.

Tricentis Core Values

Knowing what we need to achieve and how to achieve it is important. Tricentis core values define our ways of working and the behaviors we model that create an enjoyable and successful Tricentis life.

Demonstrate Self-Awareness: Own your strengths and limitations.

Finish What We Start: Do what we say we are going to do.

Move Fast: Create momentum and efficiency.

Run Towards Change: Challenge the status quo.

Serve Our Customers & Communities: Create a positive experience with each interaction.

Solve Problems Together: We win or lose as one team.

Think Big & Believe: Set extraordinary goals and believe you can achieve them

About Tricentis

Tricentis is a software company officially founded in 2007, with primary focus on software quality assurance. Whether exploratory or automated, functional or performance, API or UI, as well as mainframes or custom applications or packaged applications, or cloud-native applications - our comprehensive suite of specialized Continuous Testing tools makes DevOps real by giving our clients the confidence to release on-demand.

Tricentis has more than 1500 employees working in across over 20 global offices in US, EMEA, APAC serving over 2100 customers.

Tricentis is proud to be an equal opportunity workplace. Qualified applicants will receive consideration for employment without regard to race, color, ethnicity, gender, religious affiliation, age, sexual orientation, socioeconomic status, or physical and mental disability and other statuses protected by law.

Tricentis is proud to be an equal opportunity workplace. Qualified applicants will receive consideration for employment without regard to race, color, ethnicity, gender, religious affiliation, age, sexual orientation, socioeconomic status, or physical and mental disability and other statuses protected by law.

Global Sanctions Compliance

We comply with all applicable global sanctions and export control laws. Candidates must not be listed on any government restricted party lists (including OFAC SDN List and U.S. Commerce Department restricted lists) and must certify that their employment would not violate any sanctions or export control regulations. Candidates must notify us of any changes to their status during the application process or subsequent employment.