Active listing
Senior Cloud Security Analyst
About the role
Qualys seeks a Senior Cloud Security Analyst to fortify its multi‑cloud environment across OCI, AWS, Azure, and GCP. The role centers on threat detection, security monitoring, posture management, incident response, and automation, collaborating with Cloud Operations, DevOps, Network Security, SRE, Platform Security, and SOC teams. Candidates will design and enforce secure cloud architectures, apply CIS benchmarks, manage IAM policies, and secure data at rest and in transit. They will monitor logs with SIEM and native cloud tools, investigate incidents, and maintain playbooks. Responsibilities include vulnerability scanning, remediation tracking, compliance with NIST, ISO 27001, SOC 2, and GDPR, and ensuring centralized logging and dashboards. The analyst will also protect workloads—containers, Kubernetes, serverless—implementing image scanning and runtime security. Business continuity, disaster recovery, and backup validation are key. The role requires strong scripting (Python, PowerShell), automation (Terraform, Ansible), and communication skills to guide engineering teams and mentor junior analysts. This position offers the chance to shape Qualys’ cloud security strategy and drive resilience across a global customer base.
What you’ll do
- Manage and improve security across OCI, AWS, Azure, GCP.
- Apply and maintain CIS benchmark baselines.
- Enforce IAM policies and least‑privilege access.
- Monitor cloud logs and alerts via SIEM and CSPM.
- Investigate incidents and support response efforts.
- Run vulnerability scans and drive remediation.
- Ensure compliance with CIS, NIST, ISO 27001, SOC 2.
- Centralize logging, create dashboards, maintain retention.
- Secure containers, Kubernetes, serverless workloads.
- Mentor junior analysts and guide engineering teams.
What you’ll bring
- Bachelor's degree in Computer Science, Information Security, or related field.
- Relevant certifications (CCSK, CCSP, AWS, Azure, OCI, GCP) highly desirable.
- Proven track record designing and implementing complex cloud environments.
- Experience implementing security controls using AWS Security Hub, GuardDuty, Azure Security Center, etc.
- Knowledge of industry‑standard frameworks (NIST, CIS, GDPR, HIPAA).
- Strong problem‑solving, analytical, communication, and project management skills.
Skills
Education
Bachelor's degree in Computer Science, Information Security, or a related field.