[IT Delivery Center] Cloud Security Analyst

Eurofins Scientific is an international life sciences company, providing a unique range of analytical testing services to clients across multiple industries, to make life and our environment safer, healthier and more sustainable. From the food you eat, to the water you drink, to the medicines you rely on, Eurofins laboratories work with the biggest companies in the world to ensure the products they supply are safe, their ingredients are authentic, and labelling is accurate.

Eurofins is dedicated to delivering testing services that contribute to the health and safety of society and the planet, and to its corporate responsibility to protect the environment and ensure diversity, equity, and inclusion across the entire network of Eurofins companies.

We are seeking an experienced Cloud Security Analyst to join our Global Information Security team.

In this role, you will lead initiatives focused on strengthening Eurofins' cloud security posture across Microsoft Azure, Amazon Web Services, and Google Cloud Platform. You will serve as a trusted advisor for cloud security, providing technical leadership, governance guidance, and strategic direction for cloud security operations and risk management.

You will play a key role in the operation and evolution of Eurofins' Cloud-Native Application Protection Platform (CNAPP), cloud governance framework, and security monitoring processes. The position requires close collaboration with Cloud Engineering Teams, Security Architects, Cloud Architects, and business stakeholders globally.

Advantageous Technical Skills

- Experience with Wiz or other leading CNAPP platforms.
- Microsoft Defender for Cloud.
- M365 Desired State Configuration (M365 DSC).
- Terraform, Bicep, or similar automation frameworks.
- BMC Helix integration and workflow automation.
- Multi-cloud governance and compliance programs.
- Security automation and orchestration tooling.

Responsibilities

Act as a (senior) SME for Eurofins' Cloud-Native Application Protection Platform (CNAPP).; Drive onboarding and adoption of cloud tenants and subscriptions.; Maintain and optimize detection coverage, policies, controls, and reporting capabilities.; Define, maintain, and improve cloud security baselines, guardrails, and standards.; Support the review and approval process for security exceptions and risk acceptance requests.; Partner with Security Architects and Engineering Teams to implement enterprise cloud security controls.; Prioritize remediation initiatives based on business risk and threat exposure.; Track and drive closure of high-risk vulnerabilities and misconfigurations.; Drive security automation and infrastructure-as-code security controls.; Identify opportunities to reduce operational effort through automation.; Build trusted relationships with platform owners and technical leaders.; Participate in technical workshops and knowledge-sharing initiatives.; Mentor and support junior Cloud Security Analysts.; Enterprise Cloud Security Posture; Vulnerability and risk reduction programs; Cloud security automation initiatives; CNAPP platform maturity and adoption; Security awareness among Cloud Engineering Team

Requirements

Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Engineering, or a related field.; 3+ years of experience in Information Security or Cybersecurity,; 1+ years of hands-on cloud security experience,; Experience working with enterprise-scale cloud environments,; Proven experience managing or operating cloud security solutions,; Experience leading technical initiatives and collaborating across multiple teams.; Advanced knowledge of Microsoft Azure security services.; Strong understanding of AWS security services.; Good knowledge of Google Cloud Platform security controls.; Experience securing Kubernetes and containerized environments.; Cloud Identity and Access Management (IAM).; Vulnerability management and threat remediation processes.; Understanding of Security Architecture and threat modelling concepts.; Familiar with risk management methodologies.; DevSecOps and CI/CD security practices.; Infrastructure-as-Code security controls.; Security monitoring and cloud compliance frameworks.; Engineering thinking; Technical leadership; Strong stakeholder management; Good communication skills; Continuous improvement mindset

Nice to have

CISSP; CCSP; Microsoft Certified: Azure Security Engineer Associate (AZ-500); AWS Certified Security Specialty; Google Professional Cloud Security Engineer; Certified Kubernetes Security Specialist (CKS); TOGAF (advantageous)