- You analyze and deeply understand security findings generated by our CSPM (Cloud Security Posture Management) solutions for multi-cloud environments (e.g., GCP, STACKIT).
- You ensure the quality of our results by reviewing a substantial backlog, accurately identifying and filtering out false positives.
- You work conceptually to design and implement a new, structured prioritization schema that allows us to manage vulnerabilities efficiently and systematically.
- You analyze security issues within their full technical context to evaluate the real-world impact and apply a strictly risk-based approach.
- You actively track remediation progress, drive accountability with asset/solution owners, and ensure timely closure of identified security gaps.
- You act as a reliable technical point of contact, providing hands-on remediation guidance to the teams throughout the entire process.
Your tasks
- You analyze and deeply understand security findings generated by our CSPM (Cloud Security Posture Management) solutions for multi-cloud environments (e.g., GCP, STACKIT).
- You ensure the quality of our results by reviewing a substantial backlog, accurately identifying and filtering out false positives.
- You work conceptually to design and implement a new, structured prioritization schema that allows us to manage vulnerabilities efficiently and systematically.
- You analyze security issues within their full technical context to evaluate the real-world impact and apply a strictly risk-based approach.
- You actively track remediation progress, drive accountability with asset/solution owners, and ensure timely closure of identified security gaps.
- You act as a reliable technical point of contact, providing hands-on remediation guidance to the teams throughout the entire process.
Your Profile
- You have professional experience in Cloud Security, ideally working with CSPM tools and scalable cloud architectures.
- You possess strong analytical and conceptual skills, enabling you to design prioritization and risk evaluation strategies from the ground up.
- Your deep technical understanding allows you to grasp infrastructure, code, and the broader context of vulnerabilities to easily distinguish a critical risk from a false positive.
- You stand out with excellent communication and diplomatic skills; you know how to approach technical teams, build rapport, and foster collaboration without creating friction.
- You possess strong persistence and follow-up skills to drive vulnerability resolution across different engineering teams.
- You are characterized by a proactive, structured, and goal-oriented mindset with a strong focus on tracking tasks to completion.
- You have business-fluent English skills for our international technical environment (knowledge of Spanish or German is a plus)