We’ll trust you to
Assess and prioritize vulnerabilities and security exposures across public-cloud and cloud-native environments.
Apply technical, threat and business context to determine risk and recommend appropriate remediation or mitigating controls.
Partner with engineering, platform and security teams to validate findings and manage them through remediation, exception or closure.
Identify opportunities to improve cloud security coverage, technical controls and secure engineering practices.
Improve vulnerability-management workflows, assessment standards, data quality and reporting.
Use data analysis and automation to investigate findings and make processes more scalable and effective.
Lead technical investigations and improvement initiatives through to measurable delivery.
Produce meaningful metrics and communicate risk, progress and recommendations to technical and senior stakeholders.
Share knowledge and provide guidance to other analysts and partner teams.
You’ll need to have
Significant experience in cloud security, vulnerability management or a related technical security discipline.
Strong knowledge of public-cloud architecture, services and security concepts.
Experience assessing vulnerabilities and security findings within complex technology environments.
A strong understanding of risk-based vulnerability prioritization and relevant industry standards.
The ability to interpret technical, threat and business information to make clear and defensible security decisions.
Experience analyzing large or complex datasets, with practical scripting, query or API skills.
A good understanding of operating systems, cloud-native technologies and security-hardening principles.
Strong written and verbal communication skills, with the ability to influence technical teams and senior stakeholders.
Experience taking ownership of complex work and delivering improvements across multiple teams.
We’d love to see
Experience working across multiple public-cloud providers.
Experience with enterprise cloud-security or vulnerability-management platforms.
Knowledge of container, Kubernetes, infrastructure-as-code or CI/CD security.
Experience developing security metrics, dashboards or automated assessment processes.
Familiarity with recognized cloud-security and risk-management frameworks.
Relevant cloud or security certifications.
A Bachelor’s Degree in Computer Science, Engineering, Cybersecurity, a related discipline, or equivalent practical experience.
Salary Range = 155,000 - 190,000 USD Annual + Benefits + Bonus
The referenced salary range is based on the Company's good faith belief at the time of posting. Actual compensation may vary based on factors such as geographic location, work experience, market conditions, education/training and skill level.
We offer one of the most comprehensive and generous benefits plans available and offer a range of total rewards that may include merit increases, incentive compensation (exempt roles only), paid holidays, paid time off, medical, dental, vision, short and long term disability benefits, 401(k) +match, life insurance, and various wellness programs, among others. The Company does not provide benefits directly to contingent workers/contractors and interns.
Discover what makes Bloomberg unique - watch our podcast series for an inside look at our culture, values, and the people behind our success.