Senior Cloud Security Engineer

AlphaSense

12h•$161,000 - $185,000

About The Position

As a Senior Cloud Security Engineer, you will be responsible for enhancing the security of AlphaSense’s cloud environments within the cloud security team. This role offers significant independence in planning, driving, and developing security improvements and controls, allowing you to choose your focus within the team's responsibilities. It is a hands-on, high-autonomy position where you will own security projects from inception to operation, leading them to measurable outcomes. Success in this role requires solid experience with containerized environments, infrastructure as code, and Kubernetes across a multi-cloud (AWS and GCP) setup. You are expected to think independently, take ownership, and act as a self-starter and problem solver. Ideal candidates possess a strong cloud security background with hands-on infrastructure experience, but those with a DevOps/infrastructure engineering background and a strong interest in cloud security are also encouraged to apply.

Requirements

5-7+ years of experience in cloud security, or in security-focused infrastructure/DevOps engineering.
Hands-on experience securing containerized environments and Kubernetes.
Strong understanding of AWS (ideally GCP as well) and infrastructure-as-code solutions.
Proficiency in one or more programming or scripting languages (e.g., Python) for automation.
Experience working with cloud security posture management or similar security tooling.
A self-starter and problem solver who can own problems end to end, drive projects with minimal direction, and communicate clearly across teams.

Nice To Haves

Experience across multiple clouds (AWS and GCP).
Experience integrating security into CI/CD pipelines and DevOps/GitOps workflows.
Hands-on experience with threat modeling and security architecture reviews.
Hands-on experience working with compliance requirements and turning them into technical controls.
Contributions to security communities, open-source projects, or security research.
Relevant security certifications (e.g., CKS).

Responsibilities

Design, develop and automate security controls for cloud infrastructure across AWS and GCP.
Maintain, integrate and scale cloud security tooling (e.g., cloud security posture management and vulnerability platforms).
Investigate and remediate security vulnerabilities in cloud infrastructure, and drive remediation through to closure.
Design and build access controls across the cloud and Kubernetes environments, applying zero-trust principles.
Partner with incident response teams to build detections for cloud infrastructure, and help analyze and mitigate security incidents affecting products.
Develop security standards and guardrails for other engineering teams, and embed them into CI/CD and GitOps workflows.
Work with compliance teams to ensure adherence to frameworks such as ISO 27001, SOC 2, and GDPR, translating requirements into practical technical controls.
Conduct architecture reviews, threat modeling, and code reviews to identify security risks, collaborating closely with engineering and product teams.
Lead security projects independently — scoping, planning, and driving cross-functional work to completion.