Senior Cloud Security Engineer

AlphaSense is hiring a Senior Cloud Security Engineer to improve the security of its cloud environments. The role owns end-to-end security projects, develops and operates cloud security controls across AWS and GCP, and partners with engineering, incident response, and compliance teams.

Responsibilities:

• Design, develop and automate security controls for cloud infrastructure across AWS and GCP
• Maintain, integrate and scale cloud security tooling (e.g., cloud security posture management and vulnerability platforms)
• Investigate and remediate security vulnerabilities in cloud infrastructure, and drive remediation through to closure
• Design and build access controls across the cloud and Kubernetes environments, applying zero-trust principles
• Partner with incident response teams to build detections for cloud infrastructure, and help analyze and mitigate security incidents affecting products
• Develop security standards and guardrails for other engineering teams, and embed them into CI/CD and GitOps workflows
• Work with compliance teams to ensure adherence to frameworks such as ISO 27001, SOC 2, and GDPR, translating requirements into practical technical controls
• Conduct architecture reviews, threat modeling, and code reviews to identify security risks, collaborating closely with engineering and product teams
• Lead security projects independently — scoping, planning, and driving cross-functional work to completion

Requirements:

• 5-7+ years of experience in cloud security, or in security-focused infrastructure/DevOps engineering
• Hands-on experience securing containerized environments and Kubernetes
• Strong understanding of AWS (ideally GCP as well) and infrastructure-as-code solutions
• Proficiency in one or more programming or scripting languages (e.g., Python) for automation
• Experience working with cloud security posture management or similar security tooling
• A self-starter and problem solver who can own problems end to end, drive projects with minimal direction, and communicate clearly across teams
• Experience across multiple clouds (AWS and GCP)
• Experience integrating security into CI/CD pipelines and DevOps/GitOps workflows
• Hands-on experience with threat modeling and security architecture reviews
• Hands-on experience working with compliance requirements and turning them into technical controls
• Contributions to security communities, open-source projects, or security research
• Relevant security certifications (e.g., CKS)