IT Cloud Security Analyst

(Senior) Information Security Analyst (Cloud Security)

(Cloud Security, GSC Information Security)

Bengaluru, India
Full-time

Company Description

Eurofins Scientific is an international life sciences company which provides a unique range of analytical testing services to clients across multiple industries. The Group believes it is the world leader in food, environment and pharmaceutical products testing and in agroscience CRO services. It is also one of the global independent market leaders in certain testing and laboratory services for genomics, discovery pharmacology, forensics, advanced material sciences and for supporting clinical studies. In addition, Eurofins is one of the key emerging players in specialty clinical diagnostic testing in Europe and the USA.

Group's key figures are approx. 4.56 billion Euros turnover, over 800 laboratories across 50 countries and more than 50,000 staff.

Job Description

We are seeking an experienced Cloud Security Analyst to join our Global Information Security team.

In this role, you will lead initiatives focused on strengthening Eurofins' cloud security posture across Microsoft Azure, Amazon Web Services, and Google Cloud Platform. You will serve as a trusted advisor for cloud security, providing technical leadership, governance guidance, and strategic direction for cloud security operations and risk management.

You will play a key role in the operation and evolution of Eurofins' Cloud-Native Application Protection Platform (CNAPP), cloud governance framework, and security monitoring processes. The position requires close collaboration with Cloud Engineering Teams, Security Architects, Cloud Architects, and business stakeholders globally.

You will be responsible for:
CNAPP Platform Ownership
Act as a (senior) SME for Eurofins' Cloud-Native Application Protection Platform (CNAPP).
Drive onboarding and adoption of cloud tenants and subscriptions.
Maintain and optimize detection coverage, policies, controls, and reporting capabilities.
Define operational processes and best practices for cloud security posture management.
Ensure platform configurations remain aligned with evolving security requirements and cloud technologies.

Cloud Security Governance

Define, maintain, and improve cloud security baselines, guardrails, and standards.
Support the review and approval process for security exceptions and risk acceptance requests.
Partner with Security Architects and Engineering Teams to implement enterprise cloud security controls.
Contribute to security policies, procedures, and governance frameworks.
Promote consistency across Azure, AWS, GCP, Kubernetes, and SaaS environments.

Risk Management & Security Posture Improvement

Lead risk analysis activities related to cloud infrastructure, platforms, and services.
Prioritize remediation initiatives based on business risk and threat exposure.
Track and drive closure of high-risk vulnerabilities and misconfigurations.
Establish measurable security posture improvement objectives.
Develop KPIs, metrics, and executive reporting for cloud security initiatives.

DevSecOps & Automation

Promote security integration with CI/CD pipelines.
Drive security automation and infrastructure-as-code security controls.
Identify opportunities to reduce operational effort through automation.
Support implementation of automated compliance validation and continuous monitoring.
Improve developer security enablement through secure-by-design practices.

Leadership & Stakeholder Management

Serve as the primary point of contact for complex cloud security matters.
Build trusted relationships with platform owners and technical leaders.
Present cloud security posture and risk trends to Senior Management.
Mentor and support junior Cloud Security Analysts.
Lead technical workshops and knowledge-sharing initiatives.
Influence cloud security strategy and roadmap decisions.

Qualifications

Education

Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Engineering, or a related field.
Experience

3+ years of experience in Information Security or Cybersecurity,
1+ years of hands-on cloud security experience,
Experience working with enterprise-scale cloud environments,
Proven experience managing or operating cloud security solutions,
Experience leading technical initiatives and collaborating across multiple teams.
Required Technical Skills

Advanced knowledge of Microsoft Azure security services.
Strong understanding of AWS security services.
Good knowledge of Google Cloud Platform security controls.
Experience securing Kubernetes and containerized environments.
Cloud Identity and Access Management (IAM).
Vulnerability management and threat remediation processes.
Understanding of Security Architecture and threat modelling concepts.
Familiar with risk management methodologies.
DevSecOps and CI/CD security practices.
Infrastructure-as-Code security controls.
Security monitoring and cloud compliance frameworks.
Advantageous Technical Skills

Experience with Wiz or other leading CNAPP platforms.
Microsoft Defender for Cloud.
M365 Desired State Configuration (M365 DSC).
Terraform, Bicep, or similar automation frameworks.
BMC Helix integration and workflow automation.
Multi-cloud governance and compliance programs.
Security automation and orchestration tooling.
Preferred Certifications

One or more of the following certifications are highly desirable:

CISSP
CCSP
Microsoft Certified: Azure Security Engineer Associate (AZ-500)
AWS Certified Security Specialty
Google Professional Cloud Security Engineer
Certified Kubernetes Security Specialist (CKS)
TOGAF (advantageous)
Professional Competencies

The successful candidate will demonstrate:

Engineering thinking
Technical leadership
Strong stakeholder management
Good communication skills
Continuous improvement mindset
What You Will Drive

In this role you will influence and improve:

Enterprise Cloud Security Posture
Multi-cloud governance and security standards
Vulnerability and risk reduction programs
Cloud security automation initiatives
CNAPP platform maturity and adoption
Security awareness among Cloud Engineering Teams