Senior Cloud Security Engineer (Cloud Defense)

Allianz; Italia; Ibrido; EUR 90.000 - 120.000; Tempo pieno

Vantaggi offerti da questo lavoro

Hybrid work

Bonus scheme

Pension

Employee shares

Learning programs

Employee discounts

Descrizione del lavoro

Allianz Technology is seeking a Senior Cloud Security Engineer (Cloud Defense) to secure cloud workloads at scale across AWS, Azure and GCP. You will join the Cloud Defense team, implementing prevention, detection and response, and collaborating with international teams in a fast-paced environment.

You will drive threat detection, automation and guardrails, building incident response capabilities and ongoing improvements. A hybrid work model is offered with global collaboration.

Competenze

• Hands-on experience securing cloud environments (AWS, Azure and/or GCP), including IAM, networking and workload protection.
• Strong understanding of cloud threat detection and attacker techniques (credential abuse, lateral movement, misconfiguration exploitation).
• Experience with CNAPP/CSPM platforms (e.g., Wiz, Prisma Cloud, Lacework or similar).
• Proven ability to manage security incidents end-to-end, from investigation to containment and reporting.
• Experience designing or working with event-driven detection and SIEM/SOAR environments.
• Knowledge of microservices and cloud-native architectures, with a focus on scalability and resilience.
• Hands-on experience with Kubernetes, Docker and cloud platforms (AWS, Azure, GCP).
• Familiarity with Infrastructure as Code (Terraform, CI/CD, GitOps) and shift-left security practices.
• Scripting or automation skills (e.g., Python or similar).
• Strong communication skills in English, with the ability to explain technical findings to non-security stakeholders.

Mansioni

• Analyze and investigate cloud security findings across AWS, Azure, and GCP, prioritizing based on risk and business impact
• Manage and remediate cloud security posture issues, including misconfigurations, identity risks, and exposure scenarios
• Handle and respond to active threat detections, correlating signals across multiple data sources
• Monitor and improve SaaS security posture, identifying risks such as identity drift or third-party access issues
• Develop and enhance detection use cases within SIEM and contribute to SOAR automation workflows
• Collaborate with engineering and platform teams to implement security guardrails and enforce best practices
• Support shift-left security initiatives by integrating security into infrastructure pipelines (IaC, CI/CD)
• Contribute to continuous improvement through automation, documentation, and knowledge sharing

Conoscenze

Cloud security

AWS

Azure

GCP

SIEM

SOAR

Kubernetes

Docker

Terraform

CI/CD

Python

English communication

Strumenti

CNAPP/CSPM platforms (Wiz)

Prisma Cloud

Lacework

Descrizione del lavoro

Senior Cloud Security Engineer (Cloud Defense)

Azienda : Allianz Tipo Lavoro : Full Time Italy

Descrizione Lavoro - Senior Cloud Security Engineer (Cloud Defense)

About the Job

Join the Allianz Cyber Defense Center (ACDC) and play a key role in securing cloud environments at scale for one of the world’s leading insurance companies.

As a Senior Cloud Security Engineer, you will be part of the Cloud Defense team, working across AWS, Azure, and GCP to protect critical workloads and SaaS platforms. You will contribute across the full security lifecycle—from prevention to detection and response—helping us stay ahead in an ever-evolving threat landscape.

This is a hands-on, high-impact role where you will work at the intersection of cloud security engineering, threat detection, and automation, collaborating with international teams in a fast-paced and continuously evolving environment.

What you do

• Analyze and investigate cloud security findings across AWS, Azure, and GCP, prioritizing based on risk and business impact
• Manage and remediate cloud security posture issues, including misconfigurations, identity risks, and exposure scenarios
• Handle and respond to active threat detections, correlating signals across multiple data sources
• Monitor and improve SaaS security posture, identifying risks such as identity drift or third-party access issues
• Develop and enhance detection use cases within SIEM and contribute to SOAR automation workflows
• Collaborate with engineering and platform teams to implement security guardrails and enforce best practices
• Support shift-left security initiatives by integrating security into infrastructure pipelines (IaC, CI/CD)
• Contribute to continuous improvement through automation, documentation, and knowledge sharing

What you bring

• Hands-on experience securing cloud environments (AWS, Azure and/or GCP), including IAM, networking and workload protection
• Strong understanding of cloud threat detection and attacker techniques (e.g., credential abuse, lateral movement, misconfiguration exploitation)
• Experience with CNAPP/CSPM platforms (e.g., Wiz, Prisma Cloud, Lacework or similar)
• Proven ability to manage security incidents end-to-end, from investigation to containment and reporting
• Experience designing or working with event-driven detection and SIEM/SOAR environments
• Knowledge of microservices and cloud-native architectures, with a focus on scalability and resilience
• Hands-on experience with Kubernetes, Docker and cloud platforms (AWS, Azure, GCP)
• Familiarity with Infrastructure as Code (Terraform, CI/CD, GitOps) and shift-left security practices
• Scripting or automation skills (e.g., Python or similar)
• Strong communication skills in English, with the ability to explain technical findings to non-security stakeholders

What we offer

• We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.
• We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
• From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
• Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career andhelp our people return from career breaks with experience that nothing else can teach.

About Allianz Technology

With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform, and innovate the infrastructure, applications, and services together with Allianz companies to co-create the best customer experience.

We service the entire spectrum of digitalization – from one of the industry's largest IT infrastructure projects that spans data centers, networks, and security, to application platforms ranging from workplace services to digital interaction.

In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz.

Find us at: www.linkedin.com/company/allianz-technology .

Commitment to Integrity, Fairness & Inclusion

Allianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. Ultimately, our greatest strength as a company lies in the unique skills, experiences, and backgrounds our employees contribute.

To Recruitment Agencies

Allianz Technology has an in-house recruitment team that sources great candidates directly. Therefore, Allianz Technology does not accept unsolicited resumes from agencies or search firm recruiters.

When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz.