Cloud ASM Analyst

This job is with Allianz Commercial, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly.Envíe su solicitud a continuación después de leer todos los detalles y la información de apoyo sobre esta oportunidad de trabajo.About the JobAre you an experienced cloud security professional ready to take on a senior role in safeguarding a global organization from cyber threats? Join the Allianz Cyber Defense Center as aSenior Cloud Attack Surface Management Analystand play a crucial role in securing our AWS and Azure environments. In this senior-level role, you will take the lead in identifying, assessing, and remediating security findings while collaborating with cross-functional teams to enhance our cloud security posture. If you possess extensive hands-on experience in cloud technologies, security operations, and a strategic mindset, we want to hear from youAs aCloud Attack Surface Management Analyst , you will lead the identification and remediation of security findings, working closely with the cloud attack surface management engineer, the cloud platform team, and application teams to enhance the generation and resolution of findings.What you doMonitor and assess the security posture of AWS and Azure environments, identifying and mitigating vulnerabilities, misconfigurations, and compliance issues.Work with cross-functional teams to remediate identified findings, ensuring security best practices and guardrails are implemented to harden cloud environments.Analyze security alerts and findings from posture management tools, prioritizing and addressing issues to ensure quick and effective resolution.Document and track remediation efforts, continuously improving the overall cloud security posture.Develop and maintain cloud security guardrails, policies, and procedures to align with industry standards and regulatory requirements.Ensure compliance with cloud security regulations and promote security best practices across the organization.Stay ahead of cloud security trends, evolving threats, and emerging technologies.Proactively suggest enhancements to existing security measures to drive continuous improvement in cloud securityWhat you bringExtensive knowledge and hands-on experience with AWS and Azure cloud platforms; experience managing security in a multi-cloud environment, including Google Cloud Platform.Expertise in cloud security principles and best practices; strong familiarity with cloud security posture management tools such as Prisma, Wiz, or CrowdStrike CSPM.Solid understanding of network security, Identity and Access Management (IAM), and encryption technologies.Proven track record in security operations (CSIRT, CERT, or similar); significant experience in incident response related to cloud security issues.Experience with Security Orchestration, Automation, and Response (SOAR) technologies; strong proficiency with CI/CD pipelines and integrating security in the DevOps lifecycle.Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.Relevant certifications, such as AWS Certified Solutions Architect, Azure Administrator Associate, CISSP, or CCSPBasic knowledge of AI technologies, principles, and their practical useWhat we offerWe offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.About Allianz TechnologyWith its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform, and innovate the infrastructure, applications, and services together with Allianz companies to co-create the best customer experience.We service the entire spectrum of digitalization - from one of the industry's largest IT infrastructure projects that spans data centers, networks, and security, to application platforms ranging from workplace services to digital interaction.In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz.Find us at: to Integrity, Fairness & InclusionAllianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. Ultimately, our greatest strength as a company lies in the unique skills, experiences, and backgrounds our employees contribute.To Recruitment Agencies:Allianz Technology has an in-house recruitment team that sources great candidates directly. Therefore, Allianz Technology does not accept unsolicited resumes from agencies or search firm recruiters.When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. xsgfvud Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz.82009 | Ingeniería informática y tecnológica | Profesional / Senior | Non-Executive | Allianz Technology | Jornada completa | Indefinido