Senior Cloud Security Engineer

AlphaSense; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive compensation

High autonomy

Career growth opportunities

Job summary

AlphaSense is seeking a Senior Cloud Security Engineer to strengthen cloud environments across AWS and GCP. You will own security projects end-to-end, build automated security controls, and drive secure architectures within a high-autonomy team.

You will lead threat modeling, collaborate with incident response, and help shape security standards integrated into CI/CD and GitOps. The role requires hands-on security work and strong writing and communication across teams.

Qualifications

• 5+ years of experience in cloud security, or in security-focused infrastructure/DevOps engineering.
• Hands-on experience securing containerized environments and Kubernetes.
• Strong understanding of AWS (ideally GCP as well) and infrastructure-as-code solutions.
• Proficiency in one or more programming or scripting languages (e.g., Python) for automation.
• Experience working with cloud security posture management or similar security tooling.
• A self-starter and problem solver who can own problems end to end, drive projects with minimal direction, and communicate clearly across teams.

Responsibilities

• Design, develop and automate security controls for cloud infrastructure across AWS and GCP.
• Maintain, integrate and scale cloud security tooling (e.g., cloud security posture management and vulnerability platforms).
• Investigate and remediate security vulnerabilities in cloud infrastructure, and drive remediation through to closure.
• Design and build access controls across the cloud and Kubernetes environments, applying zero-trust principles.
• Partner with incident response teams to build detections for cloud infrastructure, and help analyze and mitigate security incidents affecting products.
• Develop security standards and guardrails for other engineering teams, and embed them into CI/CD and GitOps workflows.
• Work with compliance teams to ensure adherence to frameworks such as ISO 27001, SOC 2, and GDPR, translating requirements into practical technical controls.
• Conduct architecture reviews, threat modeling, and code reviews to identify security risks, collaborating closely with engineering and product teams.
• Lead security projects independently — scoping, planning, and driving cross-functional work to completion.

Skills

Cloud security

Kubernetes

AWS

Python

CI/CD security tooling

Tools

Terraform

CI/CD tooling

Job description

About AlphaSense:

The world’s most sophisticated companies rely on AlphaSense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, AlphaSense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content.

The acquisition of Tegus by AlphaSense in 2024 advances our shared mission to empower professionals to make smarter decisions through AI-driven market intelligence. Together, AlphaSense and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us!

About the Role

As a Senior Cloud Security Engineer you’ll be working to improve the security of AlphaSense’s cloud environments as part of the cloud security team. The team has strong independence to plan, drive and develop security improvements and controls, and you’ll have room to select your focus within the responsibilities of the team. This is a hands-on, high-autonomy role: you’ll own security projects end to end — from identifying the problem to shipping and operating the control — and lead them through to measurable outcomes.

To be successful in this role you should have solid experience with containerised environments, infrastructure as code and Kubernetes across a multi-cloud (AWS and GCP) estate. You will have autonomy and are expected to think independently, take ownership of your work, and act as a self-starter and problem solver. Ideal candidates have a strong cloud security background with the ability to work hands-on with the infrastructure; we also welcome applicants with a DevOps/infrastructure engineering background and a keen interest in developing their skills in the cloud security space.

Responsibilities

• Design, develop and automate security controls for cloud infrastructure across AWS and GCP.
• Maintain, integrate and scale cloud security tooling (e.g., cloud security posture management and vulnerability platforms).
• Investigate and remediate security vulnerabilities in cloud infrastructure, and drive remediation through to closure.
• Design and build access controls across the cloud and Kubernetes environments, applying zero-trust principles.
• Partner with incident response teams to build detections for cloud infrastructure, and help analyze and mitigate security incidents affecting products.
• Develop security standards and guardrails for other engineering teams, and embed them into CI/CD and GitOps workflows.
• Work with compliance teams to ensure adherence to frameworks such as ISO 27001, SOC 2, and GDPR, translating requirements into practical technical controls.
• Conduct architecture reviews, threat modeling, and code reviews to identify security risks, collaborating closely with engineering and product teams.
• Lead security projects independently — scoping, planning, and driving cross-functional work to completion.

Qualifications

Required

• 5+ years of experience in cloud security, or in security-focused infrastructure/DevOps engineering.
• Hands-on experience securing containerized environments and Kubernetes.
• Strong understanding of AWS (ideally GCP as well) and infrastructure-as-code solutions.
• Proficiency in one or more programming or scripting languages (e.g., Python) for automation.
• Experience working with cloud security posture management or similar security tooling.
• A self-starter and problem solver who can own problems end to end, drive projects with minimal direction, and communicate clearly across teams.

Nice to have

• Experience across multiple clouds (AWS and GCP).
• Experience integrating security into CI/CD pipelines and DevOps/GitOps workflows.
• Hands-on experience with threat modeling and security architecture reviews.
• Hands-on experience working with compliance requirements and turning them into technical controls.
• Contributions to security communities, open-source projects, or security research.
• Relevant security certifications (e.g., CKS).

Why Join Us?

• Work on cutting-edge cloud security challenges at scale in a fast-growing company.
• High autonomy and ownership to shape and drive the cloud security roadmap.
• Collaborative and security-minded engineering culture.
• Competitive compensation, benefits, and career growth opportunities.

If you’re a hands-on, self-motivated security engineer passionate about building and securing cloud infrastructure, we’d love to hear from you!

AlphaSense is an equal-opportunity employer. We are committed to a work environment that supports, inspires, and respects all individuals. All employees share in the responsibility for fulfilling AlphaSense's commitment to equal employment opportunity. AlphaSense does not discriminate against any employee or applicant on the basis of race, color, sex (including pregnancy), national origin, age, religion, marital status, sexual orientation, gender identity, gender expression, military or veteran status, disability, or any other non-merit factor. This policy applies to every aspect of employment at AlphaSense, including recruitment, hiring, training, advancement, and termination.

In addition, it is the policy of AlphaSense to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations, and ordinances where a particular employee works.