Senior Cloud Security Engineer

About the role

The Security Operations team at Tricentis is looking for a Senior Cloud Security Engineer to drive security strategy, architecture, and continuous improvement of our cloud and SaaS environments. The role combines hands‑on technical execution with strategic leadership in a fast‑paced, cloud‑first setting.

Key responsibilities

• Design, implement, and continuously improve security controls, detection capabilities, and automation across AWS and Azure environments.
• Serve as a subject matter expert on cloud security architecture, driving secure design principles and best practices.
• Lead security assessments, threat modeling, and risk analysis for cloud infrastructure, applications, and third‑party SaaS platforms.
• Develop and enhance cloud security monitoring, detection engineering, and incident response capabilities.
• Partner with Engineering, DevOps, IT, and Product teams to integrate security controls throughout the software development lifecycle.
• Identify opportunities to automate security processes and drive scalable, sustainable solutions.
• Lead remediation efforts for security findings and provide technical guidance to stakeholders.
• Investigate and respond to security incidents, performing root‑cause analysis and recommending preventative measures.

Required profile

• 5+ years of experience in Information Security with hands‑on experience securing AWS and/or Azure environments.
• Deep understanding of cloud security architecture, identity and access management, network security, and security monitoring.
• Strong knowledge of common attack methodologies, threat actors, and modern mitigation techniques.
• Proven experience leading security initiatives and driving cross‑functional projects.
• Excellent analytical, troubleshooting, and problem‑solving skills.
• Ability to communicate complex security concepts to technical and non‑technical audiences, including leadership.

Required skills

• AWS
• Azure
• Python
• PowerShell
• Terraform
• SIEM platforms
• EDR solutions
• Vulnerability management tools
• Incident response and digital forensics
• CI/CD pipeline security
• Secrets management
• Infrastructure as Code
• Kubernetes
• Docker
• Serverless technologies
• Compliance frameworks (SOC 2, ISO 27001, PCI‑DSS, GDPR)
• Industry certifications (AWS Security Specialty, Azure Security Engineer Associate, CISSP, CCSP, GIAC)