Senior Cloud Security Engineer

AlphaSense provides AI-driven market intelligence and search to help organizations make informed decisions. The Senior Cloud Security Engineer will improve the security of the company’s multi-cloud environments by designing, automating, and operating security controls across AWS, GCP, and Kubernetes. The role owns security projects end to end, investigates vulnerabilities, supports incident response, and partners with engineering and compliance teams.

Responsibilities:

• Design, develop and automate security controls for cloud infrastructure across AWS and GCP
• Maintain, integrate and scale cloud security tooling (e.g., cloud security posture management and vulnerability platforms)
• Investigate and remediate security vulnerabilities in cloud infrastructure, and drive remediation through to closure
• Design and build access controls across the cloud and Kubernetes environments, applying zero-trust principles
• Partner with incident response teams to build detections for cloud infrastructure, and help analyze and mitigate security incidents affecting products
• Develop security standards and guardrails for other engineering teams, and embed them into CI/CD and GitOps workflows
• Work with compliance teams to ensure adherence to frameworks such as ISO 27001, SOC 2, and GDPR, translating requirements into practical technical controls
• Conduct architecture reviews, threat modeling, and code reviews to identify security risks, collaborating closely with engineering and product teams
• Lead security projects independently — scoping, planning, and driving cross-functional work to completion

Requirements:

• 5-7+ years of experience in cloud security, or in security-focused infrastructure/DevOps engineering
• Hands-on experience securing containerized environments and Kubernetes
• Strong understanding of AWS (ideally GCP as well) and infrastructure-as-code solutions
• Proficiency in one or more programming or scripting languages (e.g., Python) for automation
• Experience working with cloud security posture management or similar security tooling
• A self-starter and problem solver who can own problems end to end, drive projects with minimal direction, and communicate clearly across teams
• Experience across multiple clouds (AWS and GCP)
• Experience integrating security into CI/CD pipelines and DevOps/GitOps workflows
• Hands-on experience with threat modeling and security architecture reviews
• Hands-on experience working with compliance requirements and turning them into technical controls
• Contributions to security communities, open-source projects, or security research
• Relevant security certifications (e.g., CKS)