Cloud ASM Analyst

Job description

Are you passionate about cloud security and eager to play a key role in protecting a global organization from cyber threats? Join the Allianz Cyber Defense Center as a Cloud Attack Surface Management Analyst and help secure our AWS and Azure environments. In this role, you will work on identifying, assessing, and remediating security findings, collaborating with cross-functional teams to strengthen our cloud security posture. If you have hands-on experience in cloud technologies, security operations, and are eager to make an impact in a dynamic and innovative environment, we’d love to hear from you!

 

What you can find at Allianz Technology:

·  Work Life - Balance : We offer flexible working hours so you can start your working day according to your needs. In addition, during the summer and every Friday of the year, you have the option of intensive working hours, which will allow you to enjoy more free time for yourself.
·  International and Multicultural Environment:  We value the diversity and richness that comes from working in an international and multicultural environment. With more than 52 different nationalities represented in our company, we offer our employees the opportunity to collaborate with people from all over the world, enriching the work environment and providing the opportunity to learn and grow in a truly global setting. This diversity allows us to have a broader perspective, foster creativity and innovation, and promote an inclusive work environment where every voice is heard and valued.
·  Professional Growth Opportunities:  We are committed to the professional development of our employees and provide numerous opportunities for growth within the company. We value internal talent and promote internal advancement, offering training programs, mentoring, and skills development that allow our employees to advance in their careers. 
·  Compensation and Benefits Package:  It includes a company bonus plan, pension, employee stock program, and multiple employee discounts. 

 

What will make you succeed in this position?

· 
·  Strong knowledge of AWS and Azure cloud platforms, ideally from an engineering or administration background.
·  Understanding of cloud security principles and best practices.
·  Familiarity with cloud security posture management tools, such as Prisma, Wiz, or CrowdStrike CSPM, or similar solutions.
·  Basic understanding of network security, Identity and Access Management (IAM), and encryption technologies.
·  Experience in security operations, such as CSIRT, CERT, or similar environments.
·  Familiarity with Security Orchestration, Automation, and Response (SOAR) technologies and automation processes.
·  Experience with managing security in a Multi-Cloud Environment (Google Cloud Platform (GCP), AWS, Azure).
·  Experience with Continuous Integration and Continuous Deployment (CI/CD) pipelines.
·  Experience with DevSecOps: Familiarity with integrating security practices into the DevOps process, ensuring security is part of the software development lifecycle.
·  Incident Response Experience: Experience in responding to and managing cloud-related security incidents.
·  Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field.
·  Relevant certifications (e.g., AWS Certified Solutions Architect, Azure Administrator Associate, Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP)).

 

Your mission in the role will be:

As a Cloud Attack Surface Management Analyst you will predominantly work with generated security findings. Your task will be to understand, assess, prioritize, address, and remediate findings as part of the security operations team. You will support the cloud attack surface management engineer, the cloud platform team, and application teams in improving the generation and remediation of findings. Your responsibilities include:

 

·  Cloud Security Posture Management:
·  Monitor and assess the security posture of our AWS and Azure environments.
·  Identify and assess potential attack paths, vulnerabilities, misconfigurations, and compliance issues within cloud infrastructure.
·  Collaborate with cross-functional teams to remediate identified findings.
·  Suggest guard rails and security best practices to harden cloud setups and ensure they are secure.

 

·  Issue Resolution:
·  Analyze security alerts and findings from posture management tools.
·  Prioritize and address findings, ensuring timely resolution of issues.
·  Document and track remediation efforts to improve overall security posture.

 

·  Policy and Compliance:
·  Assist in developing and maintaining cloud security guard rails, security policies and procedures based on your observations from your daily tasks.
·  Support adherence to industry standards and regulatory compliance requirements.

 

·  Continuous Improvement:
·  Stay updated on the latest cloud security threats, trends, and technologies.
·  Proactively suggest enhancements to existing security measures.

 

 

 About Allianz Technology

Allianz Technology is the global IT service provider for Allianz and delivers IT solutions that drive the digitalization of the Group. With more than 12,000 employees located in 51 countries around the globe, Allianz Technology works together with other Allianz entities in pioneering the digitalization of the financial services industry.

We oversee the full digitalization spectrum – from one of the industry’s largest IT infrastructure projects that includes data centers, networking and security, to application platforms that span from workplace services to digital interaction. In short, we deliver full-scale, end-to-end IT solutions for Allianz in the digital age.

 

D&I statement

Allianz Technology is proud to be an equal opportunity employer encouraging diversity in the working environment. We are interested in your strengths and experience. We welcome all applications from all people regardless of gender identity and/or expression, sexual orientation, ethnicity and cultural background, age, nationality, religion, disability, or philosophy of life.

 

Join us. Let´s care for tomorrow.

 

You. IT

 

63242 | Ingeniería informática y tecnológica | Profesional / Senior | Non-Executive | Allianz Technology | Jornada completa | Indefinido