Senior Cloud Security Engineer

Join AlphaSense as a Senior Cloud Security Engineer, where you'll play a crucial role in enhancing the security of our cloud environments. This hands-on position offers high autonomy, allowing you to take ownership of security projects from start to finish. You should have solid experience with containerized environments, infrastructure as code, and Kubernetes across a multi-cloud estate (AWS and GCP).

• Design, develop, and automate security controls for cloud infrastructure across AWS and GCP, and maintain, integrate, and scale cloud security tooling.
• Investigate and remediate security vulnerabilities in cloud infrastructure, and drive remediation through to closure, while partnering with incident response teams.
• Conduct architecture reviews, threat modeling, and code reviews to identify security risks, collaborating closely with engineering and product teams.

• Ideal candidates have a strong cloud security background with the ability to work hands-on with the infrastructure; we also welcome applicants with a DevOps/infrastructure engineering background and a keen interest in developing their skills in the cloud security space
• Hands-on experience securing containerized environments and Kubernetes
• Strong understanding of AWS (ideally GCP as well) and infrastructure-as-code solutions
• 5+ years of experience in cloud security, or in security-focused infrastructure/DevOps engineering
• Proficiency in one or more programming or scripting languages (e.g., Python) for automation
• Experience working with cloud security posture management or similar security tooling
• A self-starter and problem solver who can own problems end to end, drive projects with minimal direction, and communicate clearly across teams
• Experience across multiple clouds (AWS and GCP)
• Experience integrating security into CI/CD pipelines and DevOps/GitOps workflows
• Hands-on experience with threat modeling and security architecture reviews
• Hands-on experience working with compliance requirements and turning them into technical controls
• Contributions to security communities, open-source projects, or security research
• Relevant security certifications (e.g., CKS)