You analyze and deeply understand security findings generated by our CSPM (Cloud Security Posture Management) solutions for multi-cloud environments (e.g., GCP, STACKIT). You ensure the quality of our results by reviewing a substantial backlog, accurately identifying and filtering out false positives. You work conceptually to design and implement a new, structured prioritization schema that allows us to manage vulnerabilities efficiently and systematically. You analyze security issues within their full technical context to evaluate the real-world impact and apply a strictly risk-based approach. You actively track remediation progress, drive accountability with asset/solution owners, and ensure timely closure of identified security gaps. You act as a reliable technical point of contact, providing hands-on remediation guidance to the teams throughout the entire process. Your tasks
You analyze and deeply understand security findings generated by our CSPM (Cloud Security Posture Management) solutions for multi-cloud environments (e.g., GCP, STACKIT). You ensure the quality of our results by reviewing a substantial backlog, accurately identifying and filtering out false positives. You work conceptually to design and implement a new, structured prioritization schema that allows us to manage vulnerabilities efficiently and systematically.
You analyze security issues within their full technical context to evaluate the real-world impact and apply a strictly risk-based approach. You actively track remediation progress, drive accountability with asset/solution owners, and ensure timely closure of identified security gaps. You act as a reliable technical point of contact, providing hands-on remediation guidance to the teams throughout the entire process. Your Profile
You have professional experience in Cloud Security, ideally working with CSPM tools and scalable cloud architectures. You possess strong analytical and conceptual skills, enabling you to design prioritization and risk evaluation strategies from the ground up. Your deep technical understanding allows you to grasp infrastructure, code, and the broader context of vulnerabilities to easily distinguish a critical risk from a false positive. You stand out with excellent communication and diplomatic skills; you know how to approach technical teams, build rapport, and foster collaboration without creating friction. You possess strong persistence and follow-up skills to drive vulnerability resolution across different engineering teams. You are characterized by a proactive, structured, and goal-oriented mindset with a strong focus on tracking tasks to completion. You have business-fluent English skills for our international technical environment (knowledge of Spanish or German is a plus)