Senior Cloud Security Engineer

Join AlphaSense as a Senior Cloud Security Engineer, where you'll have the opportunity to improve the security of our cloud environments. This hands-on role allows for high autonomy, as you'll own security projects from start to finish and lead them to measurable outcomes. Responsibilities include designing and automating security controls, investigating and remediating vulnerabilities, building access controls, and working with compliance teams. Ideal candidates have a strong cloud security background, experience with containerized environments and Kubernetes, and proficiency in programming or scripting languages.

• Design, develop, and automate security controls for cloud infrastructure across AWS and GCP, and maintain, integrate, and scale cloud security tooling.
• Investigate and remediate security vulnerabilities in cloud infrastructure, and drive remediation through to closure, while partnering with incident response teams.
• Develop security standards and guardrails for other engineering teams, and embed them into CI/CD and GitOps workflows, ensuring adherence to compliance frameworks.

• You will have autonomy and are expected to think independently, take ownership of your work, and act as a self-starter and problem solver
• Ideal candidates have a strong cloud security background with the ability to work hands-on with the infrastructure; we also welcome applicants with a DevOps/infrastructure engineering background and a keen interest in developing their skills in the cloud security space
• To be successful in this role you should have solid experience with containerised environments, infrastructure as code and Kubernetes across a multi-cloud (AWS and GCP) estate
• 5-7+ years of experience in cloud security, or in security-focused infrastructure/DevOps engineering
• Hands-on experience securing containerized environments and Kubernetes
• Experience working with cloud security posture management or similar security tooling
• Strong understanding of AWS (ideally GCP as well) and infrastructure-as-code solutions
• Proficiency in one or more programming or scripting languages (e.g., Python) for automation
• A self-starter and problem solver who can own problems end to end, drive projects with minimal direction, and communicate clearly across teams
• Relevant security certifications (e.g., CKS)
• Contributions to security communities, open-source projects, or security research
• Hands-on experience working with compliance requirements and turning them into technical controls
• Hands-on experience with threat modeling and security architecture reviews
• Experience integrating security into CI/CD pipelines and DevOps/GitOps workflows
• Experience across multiple clouds (AWS and GCP)