onsite
Senior Security Analyst - Cloud Security Assurance - International Monetary Fund
Security Engineer
Senior Security Analyst focused on cloud security assurance, designing and implementing security controls across AWS, Azure, and GCP environments while leading vulnerability management and incident response initiatives.
About the role
Key Responsibilities
- Design, implement, and maintain security controls for multi‑cloud environments (AWS, Azure, GCP) to meet regulatory and organizational standards.
- Conduct continuous vulnerability assessments, risk analyses, and remediation tracking for cloud workloads.
- Lead cloud‑focused incident response activities, including detection, investigation, and post‑mortem reporting.
- Collaborate with engineering and operations teams to embed security best practices into CI/CD pipelines and infrastructure‑as‑code.
- Develop and maintain cloud security policies, standards, and compliance documentation (e.g., ISO 27001, NIST).
Requirements
- 5+ years of experience in information security with a strong focus on cloud platforms (AWS, Azure, GCP).
- Hands‑on expertise in cloud security architecture, IAM, network security, and encryption mechanisms.
- Proven experience with vulnerability scanning tools, threat hunting, and incident response in cloud environments.
- Relevant certifications such as AWS Certified Security – Specialty, Certified Cloud Security Professional (CCSP), or equivalent.
- Excellent analytical, communication, and stakeholder‑management skills.