Senior Cloud Security Engineer, AlphaSense

• Ideal candidates have a strong cloud security background with the ability to work hands-on with the infrastructure; we also welcome applicants with a DevOps/infrastructure engineering background and a keen interest in developing their skills in the cloud security space
• 5+ years of experience in cloud security, or in security-focused infrastructure/DevOps engineering
• Hands-on experience securing containerized environments and Kubernetes
• Strong understanding of AWS (ideally GCP as well) and infrastructure-as-code solutions
• Proficiency in one or more programming or scripting languages (e.g., Python) for automation
• Experience working with cloud security posture management or similar security tooling
• A self-starter and problem solver who can own problems end to end, drive projects with minimal direction, and communicate clearly across teams

Desirable

• As a Senior Cloud Security Engineer you’ll be working to improve the security of AlphaSense’s cloud environments as part of the cloud security team
• The team has strong independence to plan, drive and develop security improvements and controls, and you’ll have room to select your focus within the responsibilities of the team
• This is a hands-on, high-autonomy role: you’ll own security projects end to end — from identifying the problem to shipping and operating the control — and lead them through to measurable outcomes
• To be successful in this role you should have solid experience with containerised environments, infrastructure as code and Kubernetes across a multi-cloud (AWS and GCP) estate
• You will have autonomy and are expected to think independently, take ownership of your work, and act as a self-starter and problem solver
• Design, develop and automate security controls for cloud infrastructure across AWS and GCP
• Maintain, integrate and scale cloud security tooling (e.g., cloud security posture management and vulnerability platforms)
• Investigate and remediate security vulnerabilities in cloud infrastructure, and drive remediation through to closure
• Design and build access controls across the cloud and Kubernetes environments, applying zero-trust principles
• Partner with incident response teams to build detections for cloud infrastructure, and help analyze and mitigate security incidents affecting products
• Develop security standards and guardrails for other engineering teams, and embed them into CI/CD and GitOps workflows
• Work with compliance teams to ensure adherence to frameworks such as ISO 27001, SOC 2, and GDPR, translating requirements into practical technical controls
• Conduct architecture reviews, threat modeling, and code reviews to identify security risks, collaborating closely with engineering and product teams
• Lead security projects independently — scoping, planning, and driving cross-functional work to completion