IT Cloud Security Analyst

Eurofins; Bengaluru; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Eurofins Scientific is seeking an experienced (Senior) Information Security Analyst to lead cloud security initiatives across Azure, AWS, and Google Cloud. You will drive CNAPP platform ownership, cloud governance, and risk management within a global team.

You will collaborate with Cloud Engineering, Security Architects, and business stakeholders to implement security controls, CI/CD security, IaC, and measurable KPIs, while mentoring junior analysts and reporting to senior management.

Qualifications

• Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Engineering, or a related field.
• 3+ years of experience in Information Security or Cybersecurity.
• 1+ years of hands-on cloud security experience.
• Experience with enterprise-scale cloud environments and security solutions.

Responsibilities

• Lead CNAPP platform ownership and cloud security posture management.
• Define operational processes for cloud security governance and controls.
• Drive onboarding of cloud tenants and subscriptions across multi-clouds.
• Promote security automation within CI/CD pipelines and IaC.
• Mentor and support junior Cloud Security Analysts.
• Present cloud security posture and risk trends to Senior Management.

Skills

Cloud security

Technical leadership

Stakeholder management

Communication skills

Education

Bachelor's degree in Cybersecurity

Master's degree in Cybersecurity

Tools

Terraform

Bicep

Kubernetes

CI/CD

Job description

Eurofins Scientific is an international life sciences company which provides a unique range of analytical testing services to clients across multiple industries. The Group believes it is the world leader in food, environment and pharmaceutical products testing and in agroscience CRO services. It is also one of the global independent market leaders in certain testing and laboratory services for genomics, discovery pharmacology, forensics, advanced material sciences and for supporting clinical studies. In addition, Eurofins is one of the key emerging players in specialty clinical diagnostic testing in Europe and the USA.

Group's key figures are approx. 7.296 billion Euros turnover, over 950 laboratories across 59 countries and about 65,000 staff.

Job Description

(Senior) Information Security Analyst (Cloud Security)

Eurofins Scientific is an international life sciences company which provides a unique range of analytical testing services to clients across multiple industries. The Group believes it is the world leader in food, environment and pharmaceutical products testing and in agroscience CRO services. It is also one of the global independent market leaders in certain testing and laboratory services for genomics, discovery pharmacology, forensics, advanced material sciences and for supporting clinical studies. In addition, Eurofins is one of the key emerging players in specialty clinical diagnostic testing in Europe and the USA.

Group's key figures are approx. 7.296 billion Euros turnover, over 950 laboratories across 59 countries and about 65,000 staff.

Company Description

Eurofins Scientific is an international life sciences company which provides a unique range of analytical testing services to clients across multiple industries. The Group believes it is the world leader in food, environment and pharmaceutical products testing and in agroscience CRO services. It is also one of the global independent market leaders in certain testing and laboratory services for genomics, discovery pharmacology, forensics, advanced material sciences and for supporting clinical studies. In addition, Eurofins is one of the key emerging players in specialty clinical diagnostic testing in Europe and the USA.

Group's key figures are approx. 4.56 billion Euros turnover, over 800 laboratories across 50 countries and more than 50,000 staff.

We are seeking an experienced Cloud Security Analyst to join our Global Information Security team.

In this role, you will lead initiatives focused on strengthening Eurofins' cloud security posture across Microsoft Azure, Amazon Web Services, and Google Cloud Platform. You will serve as a trusted advisor for cloud security, providing technical leadership, governance guidance, and strategic direction for cloud security operations and risk management.

You will play a key role in the operation and evolution of Eurofins' Cloud-Native Application Protection Platform (CNAPP), cloud governance framework, and security monitoring processes. The position requires close collaboration with Cloud Engineering Teams, Security Architects, Cloud Architects, and business stakeholders globally.

You will be responsible for:

• CNAPP Platform Ownership
• Act as a (senior) SME for Eurofins' Cloud-Native Application Protection Platform (CNAPP).
• Drive onboarding and adoption of cloud tenants and subscriptions.
• Maintain and optimize detection coverage, policies, controls, and reporting capabilities.
• Define operational processes and best practices for cloud security posture management.
• Ensure platform configurations remain aligned with evolving security requirements and cloud technologies.

Cloud Security Governance

• Define, maintain, and improve cloud security baselines, guardrails, and standards.
• Support the review and approval process for security exceptions and risk acceptance requests.
• Partner with Security Architects and Engineering Teams to implement enterprise cloud security controls.
• Contribute to security policies, procedures, and governance frameworks.
• Promote consistency across Azure, AWS, GCP, Kubernetes, and SaaS environments.

Risk Management & Security Posture Improvement

• Lead risk analysis activities related to cloud infrastructure, platforms, and services.
• Prioritize remediation initiatives based on business risk and threat exposure.
• Track and drive closure of high-risk vulnerabilities and misconfigurations.
• Establish measurable security posture improvement objectives.
• Develop KPIs, metrics, and executive reporting for cloud security initiatives.

DevSecOps & Automation

• Promote security integration with CI/CD pipelines.
• Drive security automation and infrastructure-as-code security controls.
• Identify opportunities to reduce operational effort through automation.
• Support implementation of automated compliance validation and continuous monitoring.
• Improve developer security enablement through secure-by-design practices.

Leadership & Stakeholder Management

• Serve as the primary point of contact for complex cloud security matters.
• Build trusted relationships with platform owners and technical leaders.
• Present cloud security posture and risk trends to Senior Management.
• Mentor and support junior Cloud Security Analysts.
• Lead technical workshops and knowledge-sharing initiatives.
• Influence cloud security strategy and roadmap decisions.

Qualifications

Education

Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Engineering, or a related field.

Experience

3+ years of experience in Information Security or Cybersecurity,

1+ years of hands-on cloud security experience,

Experience working with enterprise-scale cloud environments,

Proven experience managing or operating cloud security solutions,

Experience leading technical initiatives and collaborating across multiple teams.

Required Technical Skills

• Advanced knowledge of Microsoft Azure security services.
• Strong understanding of AWS security services.
• Good knowledge of Google Cloud Platform security controls.
• Experience securing Kubernetes and containerized environments.
• Cloud Identity and Access Management (IAM).
• Vulnerability management and threat remediation processes.
• Understanding of Security Architecture and threat modelling concepts.
• Familiar with risk management methodologies.
• DevSecOps and CI/CD security practices.
• Infrastructure-as-Code security controls.
• Security monitoring and cloud compliance frameworks.

Advantageous Technical Skills

• Experience with Wiz or other leading CNAPP platforms.
• Microsoft Defender for Cloud.
• M365 Desired State Configuration (M365 DSC).
• Terraform, Bicep, or similar automation frameworks.
• BMC Helix integration and workflow automation.
• Multi-cloud governance and compliance programs.
• Security automation and orchestration tooling.

Preferred Certifications

One or more of the following certifications are highly desirable:

• CISSP
• CCSP
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• AWS Certified Security Specialty
• Google Professional Cloud Security Engineer
• Certified Kubernetes Security Specialist (CKS)
• TOGAF (advantageous)
• Professional Competencies

The successful candidate will demonstrate:

• Engineering thinking
• Technical leadership
• Strong stakeholder management
• Good communication skills
• Continuous improvement mindset

What You Will Drive

In this role you will influence and improve:

• Enterprise Cloud Security Posture
• Multi-cloud governance and security standards
• Vulnerability and risk reduction programs
• Cloud security automation initiatives
• CNAPP platform maturity and adoption
• Security awareness among Cloud Engineering Teams