Cloud Security Engineer

As a Senior Cloud Security Engineer you’ll be working to improve the security of AlphaSense’s cloud environments as part of the cloud security team. The team has strong independence to plan, drive and develop security improvements and controls, and you’ll have room to select your focus within the responsibilities of the team. This is a hands-on, high-autonomy role: you’ll own security projects end to end — from identifying the problem to shipping and operating the control — and lead them through to measurable outcomes. To be successful in this role you should have solid experience with containerised environments, infrastructure as code and Kubernetes across a multi-cloud (AWS and GCP) estate. You will have autonomy and are expected to think independently, take ownership of your work, and act as a self-starter and problem solver. Ideal candidates have a strong cloud security background with the ability to work hands-on with the infrastructure; we also welcome applicants with a DevOps/infrastructure engineering background and a keen interest in developing their skills in the cloud security space. Responsibilities - Design, develop and automate security controls for cloud infrastructure across AWS and GCP. - Maintain, integrate and scale cloud security tooling (e.g., cloud security posture management and vulnerability platforms). - Investigate and remediate security vulnerabilities in cloud infrastructure, and drive remediation through to closure. - Design and build access controls across the cloud and Kubernetes environments, applying zero-trust principles. - Partner with incident response teams to build detections for cloud infrastructure, and help analyze and mitigate security incidents affecting products. - Develop security standards and guardrails for other engineering teams, and embed them into CI/CD and GitOps workflows. - Work with compliance teams to ensure adherence to frameworks such as ISO 27001, SOC 2, and GDPR, translating requirements into practical technical controls. - Conduct architecture reviews, threat modeling, and code reviews to identify security risks, collaborating closely with engineering and product teams. - Lead security projects independently — scoping, planning, and driving cross-functional work to completion. Qualifications Required - 5+ years of experience in cloud security, or in security-focused infrastructure/DevOps engineering. - Hands-on experience securing containerized environments and Kubernetes. - Strong understanding of AWS (ideally GCP as well) and infrastructure-as-code solutions. - Proficiency in one or more programming or scripting languages (e.g., Python) for automation. - Experience working with cloud security posture management or similar security tooling. - A self-starter and problem solver who can own problems end to end, drive projects with minimal direction, and communicate clearly across teams. Nice to have - Experience across multiple clouds (AWS and GCP). - Experience integrating security into CI/CD pipelines and DevOps/GitOps workflows. - Hands-on experience with threat modeling and security architecture reviews. - Hands-on experience working with compliance requirements and turning them into technical controls. - Contributions to security communities, open-source projects, or security research. - Relevant security certifications (e.g., CKS).