Mô tả công việc
Job Summary
We are seeking an experienced Cloud Security Analyst to join our Global Information Security team. In this role, you will lead initiatives focused on strengthening Eurofins' cloud security posture across Microsoft Azure, Amazon Web Services, and Google Cloud Platform. You will serve as a trusted advisor for cloud security, providing technical leadership, governance guidance, and strategic direction for cloud security operations and risk management.
Responsibilities
- Lead the operation and evolution of Eurofins' Cloud‑Native Application Protection Platform (CNAPP), cloud governance framework, and security monitoring processes.
- Collaborate with Cloud Engineering Teams, Security Architects, Cloud Architects, and business stakeholders globally.
- Act as a senior SME for CNAPP, drive onboarding and adoption of cloud tenants and subscriptions, and maintain and optimize detection coverage, policies, controls, and reporting capabilities.
- Define, maintain, and improve cloud security baselines, guardrails, and standards; support the review and approval process for security exceptions and risk acceptance requests.
- Partner with Security Architects and Engineering Teams to implement enterprise cloud security controls.
- Prioritize remediation initiatives based on business risk and threat exposure; track and drive closure of high‑risk vulnerabilities and misconfigurations.
- Drive security automation and infrastructure‑as‑code security controls; identify opportunities to reduce operational effort through automation.
- Build trusted relationships with platform owners and technical leaders; participate in technical workshops and knowledge‑sharing initiatives.
- Mentor and support junior Cloud Security Analysts.
What You Will Drive
- Enterprise Cloud Security Posture
- Vulnerability and risk reduction programs
- Cloud security automation initiatives
- CNAPP platform maturity and adoption
- Security awareness among Cloud Engineering Team
Qualifications
Education
- Bachelor’s or Master’s degree in Cybersecurity, Information Security, Computer Science, Engineering, or a related field.
Experience
- 3+ years of experience in Information Security or Cybersecurity.
- 1+ years of hands‑on cloud security experience.
- Experience working with enterprise‑scale cloud environments.
- Proven experience managing or operating cloud security solutions.
- Experience leading technical initiatives and collaborating across multiple teams.
Required Technical Skills
- Advanced knowledge of Microsoft Azure security services.
- Strong understanding of AWS security services.
- Good knowledge of Google Cloud Platform security controls.
- Experience securing Kubernetes and containerized environments.
- Cloud Identity and Access Management (IAM).
- Vulnerability management and threat remediation processes.
- Understanding of Security Architecture and threat modelling concepts.
- Familiar with risk management methodologies.
- DevSecOps and CI/CD security practices.
- Infrastructure‑as‑Code security controls.
- Security monitoring and cloud compliance frameworks.
Advantageous Technical Skills
- Experience with Wiz or other leading CNAPP platforms.
- Microsoft Defender for Cloud.
- M365 Desired State Configuration (M365 DSC).
- Terraform, Bicep, or similar automation frameworks.
- BMC Helix integration and workflow automation.
- Multi‑cloud governance and compliance programs.
- Security automation and orchestration tooling.
Preferred Certifications
- CISSP
- CCSP
- Microsoft Certified: Azure Security Engineer Associate (AZ‑500)
- AWS Certified Security Specialty
- Google Professional Cloud Security Engineer
- Certified Kubernetes Security Specialist (CKS)
- TOGAF (advantageous)
Professional Competencies
- Engineering thinking
- Technical leadership
- Strong stakeholder management
- Good communication skills
- Continuous improvement mindset