Cloud Security Architect

Senior Cloud Security Analyst

Reporting to the Global Head of Security under Product Security, the Sr Cloud Security Analyst plays a crucial role in leading our Cloud Security program, ensuring the highest level of security for our Product and Development teams.

As Sr. Cloud Security Analyst, you will be working to improve the security of Alter Domus cloud environments as part of the cloud security team. The team has strong independence to plan, drive and develop security improvements and controls. You will have autonomy and are expected to think independently and take ownership of your work while having strong communication skills.

You will be responsible for developing and implementing security strategies and solutions to protect cloud-based applications and data. This role requires a deep understanding of cloud technologies, security protocols, and best practices to safeguard sensitive information and ensure compliance with regulatory requirements.

To be successful in this role you should also have experience in containerized environments and Kubernetes and prior experience ensuring SOC 2 compliance for the cloud environment.

Job description:

• Core responsibilities include:

• Cloud Security Controls: Design and implement security controls across AWS, Azure environments.

• Continuously enhance our cloud security posture management (CSPM) program to identify and remediate risks in configurations and policies.
• Ensure SOC 2 cloud security controls are always executed and auditable.
• Container & Kubernetes Security: Oversee security for containerized applications and Kubernetes clusters. Establish best practices for container image security, pod security policies, and cluster network segmentation to protect our microservices.

• Managing and configuring WAFs with Akamai, with experience doing CADR (Cloud Application Detection and Response) with run-time security tools and requires deep understanding of Linux.

• Overall, You must:

• Ensure cloud systems and solutions are secure by design and champion a secure guardrails approach—automating security checks and educating teams to build secure systems from the ground up.

• Conduct continuous vulnerability and compliance validation to ensure ongoing adherence to security policies and regulations.
• Monitor cloud environments for security incidents and ensuring rapid response through automated mechanisms.
• Serve as subject matter expert on cloud technologies and security solutions
• Perform technical security design, architecture, change and/or configuration audits/reviews on our hosting environments including Azure & AWS, servers, network devices, endpoints, and security technologies deployed (CNAPP, MDM, WAF, DDoS, etc.)
• Collaborate with cross-functional teams, including developers, cloud engineers, architects, and operations, to embed security in critical initiatives including API security.
• Foster a culture of continuous improvement, innovation, and knowledge sharing across the organization and staying updated on the latest cloud security threats and advancements.

Your profile:

• Bachelor's degree in computer science, Information Security, or related professional experience.
• 6+ years' experience in cloud security
• 3+ years hand-on experience working with containerized environments
• Excellent understanding of Azure, AWS, k8s
• Experience working with cloud security posture management tooling
• Hands-on experience on threat modeling and security architecture reviews.
• Hands-on experience of working with compliance requirements and turning them to technical controls: Ability to implement and manage security controls in cloud environments
• Knowledge of cloud security best practices and industry standards
• Strong analytical and problem-solving skills
• Ability to think critically and make data-driven decisions
• Excellent documentation skills, including the creation of procedures, process documentation, and user documentation
• Certifications: Relevant certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), or AWS Certified Security – Specialty are preferred.
• Technical Skills: Proficiency in cloud platforms (e.g., AWS, Azure), security tools, and technologies (e.g., firewalls, intrusion detection systems, encryption).
• Knowledge: Strong understanding of cloud security principles, risk management, and compliance frameworks.

• Soft Skills:

• The ability to collaborate effectively with cross-functional teams.

• Keen attention to detail and a vigilant, solutions-oriented mindset
• Excellent organizational skills and the ability to work under pressure on multiple projects, balance competing priorities, and meet deadlines both when working alone and with others.
• Self-motivated and able to complete projects with minimal supervision.
• Ability to rapidly evaluate, research, learn, and apply advanced and emerging data security principles, theories, and concepts.
• Positive attitude and outstanding, proactive problem-identification and problem-solving skills.
• Strong interpersonal and project management skills, and the ability to collaborate with colleagues across the enterprise and to work effectively in a matrixed, geographically distributed organization.