Cloud Security Compliance Analyst

• Work within the Cybersecurity domain focusing on automated security testing to improve the security posture of products and systems.
• Support engineering community in building and maintaining secure cloud infrastructure.
• Conduct threat modeling, security architecture reviews, and risk assessments.
• Design and operate tools that enhance visibility and remediate security issues across cloud-native environments.
• Champion secure development practices within Agile teams.
• Build and operate security tooling and controls that scale with infrastructure.
• Ensure security compliance and contribute to internal and external audits.

Requirements:

• 6 to 12 years experience in cybersecurity architecture and infrastructure security
• Hands-on experience with Google Cloud Platform (GCP) and/or Azure
• Strong knowledge of API security and working with REST APIs
• Proficient in CI/CD toolchains with security testing tool integration
• Deep understanding of Kubernetes, Infrastructure-as-Code (IaC), and DevSecOps best practices

Preferred Qualifications:

• Certifications such as CCSP, GCP/Azure Security Engineer, CISSP are a plus
• Experience with tools like SonarQube, Checkmarx, Aqua Security, Twistlock, Terraform, etc.

Strong communication and stakeholder management skills