security engineer in cloud infrastructure

AlphaSense provides AI-powered market intelligence and search that help professionals make smarter decisions using trusted public, private, and proprietary research content. Its platform serves more than 6,000 enterprise customers, including a majority of the S&P 500.

• Design, develop, and automate security controls for cloud infrastructure across AWS and GCP;
• Maintain, integrate, and scale cloud security tooling, including cloud security posture management and vulnerability platforms;
• Investigate and remediate security vulnerabilities in cloud infrastructure and drive remediation through to closure;
• Design and build access controls across cloud and Kubernetes environments using zero-trust principles;
• Partner with incident response teams to build detections for cloud infrastructure and help analyze and mitigate product-related security incidents;
• Develop security standards and guardrails for engineering teams and embed them into CI/CD and GitOps workflows;
• Work with compliance teams to support ISO 27001, SOC 2, and GDPR adherence by translating requirements into practical technical controls;
• Conduct architecture reviews, threat modeling, and code reviews to identify security risks with engineering and product teams;
• Lead security projects independently by scoping, planning, and driving cross-functional work to completion.

• 5+ Years of experience in cloud security or security-focused infrastructure/DevOps engineering;
• Hands-on experience securing containerized environments and Kubernetes;
• Strong understanding of AWS and ideally GCP, as well as infrastructure-as-code solutions;
• Proficiency in one or more programming or scripting languages, such as Python, for automation;
• Experience with cloud security posture management or similar security tooling;
• Ability to own problems end to end, drive projects with minimal direction, communicate clearly across teams, and work as a self-starter and problem solver;
• Nice to have: experience across multiple clouds including AWS and GCP, security integration into CI/CD pipelines and DevOps/GitOps workflows, threat modeling and security architecture reviews, compliance requirements translated into technical controls, contributions to security communities, open-source projects or security research, relevant security certifications such as CKS.

• Competitive compensation, benefits, and career growth opportunities.