Cloud Security Engineer

About AlphaSense: The world’s most sophisticated companies rely on AlphaSense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, AlphaSense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content. The acquisition of Tegus by AlphaSense in 2024 advances our shared mission to empower professionals to make smarter decisions through AI-driven market intelligence. Together, AlphaSense and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us! About the Role As a Senior Cloud Security Engineer you’ll be working to improve the security of AlphaSense’s cloud environments as part of the cloud security team. The team has strong independence to plan, drive and develop security improvements and controls, and you’ll have room to select your focus within the responsibilities of the team. This is a hands-on, high-autonomy role: you’ll own security projects end to end — from identifying the problem to shipping and operating the control — and lead them through to measurable outcomes. To be successful in this role you should have solid experience with containerised environments, infrastructure as code and Kubernetes across a multi-cloud (AWS and GCP) estate. You will have autonomy and are expected to think independently, take ownership of your work, and act as a self-starter and problem solver. Ideal candidates have a strong cloud security background with the ability to work hands-on with the infrastructure; we also welcome applicants with a DevOps/infrastructure engineering background and a keen interest in developing their skills in the cloud security space. Responsibilities Design, develop and automate security controls for cloud infrastructure across AWS and GCP. Maintain, integrate and scale cloud security tooling (e.g., cloud security posture management and vulnerability platforms). Investigate and remediate security vulnerabilities in cloud infrastructure, and drive remediation through to closure. Design and build access controls across the cloud and Kubernetes environments, applying zero-trust principles. Partner with incident response teams to build detections for cloud infrastructure, and help analyze and mitigate security incidents affecting products. Develop security standards and guardrails for other engineering teams, and embed them into CI/CD and GitOps workflows. Work with compliance teams to ensure adherence to frameworks such as ISO 27001, SOC 2, and GDPR, translating requirements into practical technical controls. Conduct architecture reviews, threat modeling, and code reviews to identify security risks, collaborating closely with engineering and product teams. Lead security projects independently — scoping, planning, and driving cross-functional work to completion. Qualifications Required 5+ years of experience in cloud security, or in security-focused infrastructure/DevOps engineering. Hands-on experience securing containerized environments and Kubernetes. Strong understanding of AWS (ideally GCP as well) and infrastructure-as-code solutions. Proficiency in one or more programming or scripting languages (e.g., Python) for automation. Experience working with cloud security posture management or similar security tooling. A self-starter and problem solver who can own problems end to end, drive projects with minimal direction, and communicate clearly across teams. Nice to have Experience across multiple clouds (AWS and GCP). Experience integrating security into CI/CD pipelines and DevOps/GitOps workflows. Hands-on experience with threat modeling and security architecture reviews. Hands-on experience working with compliance requirements and turning them into technical controls. Contributions to security communities, open-source projects, or security research. Relevant security certifications (e.g., CKS).