cloud security analyst

<div>Line of Service
Internal Firm Services
Industry/Sector
Not Applicable
Specialism
IFS - Internal Firm Services - Other
Management Level
Associate
Job Description &amp; Summary
At PwC, our people in managed services focus on a variety of outsourced solutions and support clients across numerous functions. These individuals help organisations streamline their operations, reduce costs, and improve efficiency by managing key processes and functions on their behalf. They are skilled in project management, technology, and process optimization to deliver high-quality services to clients.
 
 
Those in managed service management and strategy at PwC will focus on transitioning and running services, along with managing delivery teams, programmes, commercials, performance and delivery risk. Your work will involve the process of continuous improvement and optimising of the managed services process, tools and services.
Why PwC
Established in the region for over 40 years, PwC Middle East employs over 6,000 people across 12 countries: Bahrain, Egypt, Iraq, Jordan, Kuwait, Lebanon, Libya, Oman, Qatar, Saudi Arabia, Palestine and the United Arab Emirates. Complementing our depth of industry expertise and breadth of skills is our sound knowledge of local business environments across the Middle East region. Our tailored solutions help our clients meet the challenges and opportunities of doing business in the Middle East market, and beyond. 
 
Job Summary
A career in our Cyber technology services will allow you to work under the supervision of cyber cybersecurity leadership within the Cyber business unit consulting practice. Use strategic business consulting skills to work with clients through all stages of strategy-based transformation projects. Provide support on client assignments that help to develop a strategy and then refocus an organization on making that strategy a reality. We are a growing team and looking for dynamic, flexible, proactive and hardworking consultants who have a passion for shaping cybersecurity positively in the GCC over the coming years. We have a strong pipeline of large, transformational opportunities with our clients which will provide great opportunities for all our people to step up and play significant and rewarding roles in an entrepreneurial and innovation driven environment.
Roles &amp; Responsibilities
As a Senior Associate, you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to:
Work under the supervision of cybersecurity leadership within the Cyber &amp; Digital Trust business unit consulting practice.
Support in the design and development of cybersecurity programs in different domains including the development of strategy, GRC, architecture, identity and access management and cybersecurity solutions based on leading practices such as NIST, CIS, ISO27001 and others.
Support the development and implementation of cybersecurity governance, risk and compliance frameworks aligned with NIST CSF, ISO 27001, CIS Controls, and local GCC regulatory requirements (e.g., NCA, SAMA, NESA, TDRA, NDMO).
Conduct cybersecurity risk assessments, maturity assessments, and gap analyses to benchmark client capabilities against industry standards and regulatory expectations.
Develop and refine cybersecurity policies, procedures, standards, and guidelines ensuring alignment with business objectives, compliance mandates and leading practices.
Support audit readiness and certification efforts for frameworks such as ISO 27001 and other related standards.
Design of cybersecurity strategies and roadmaps that balance risk management, business enablement, and digital transformation goals.
Work closely with cross-functional teams to define target operating models for cybersecurity functions, including governance structures, roles, and performance indicators.
Develop and execute cybersecurity awareness and culture programs. This includes designing tailored awareness campaigns, executive briefings, training programs, and behavior-change initiatives to foster a culture of digital trust and resilience.
Assist in the design of target technical security architecture for clients with deep understanding and analysis of emerging cybersecurity solutions including, but not limited to, threat intelligence, anti-advanced persistent threats, DLP, SIEM, next generation firewalls, analytics, enterprise incident response and others.
Support in the implementation of cybersecurity solutions at client premises and be able to work closely with security vendors and system integrators.
Communicate effectively (both verbal and writing) with executives, IT personnel, executives, and business users communities, translating complex cybersecurity concepts into actionable insights.
Support in coordinating, facilitating, and making presentations.
Support in business development activities, including preparation of technical and financial proposals and participation in client pursuits.
Work with colleagues across PwC Middle East offices on client engagements and internal initiatives as well as with international teams.
Conduct research on emerging cybersecurity technologies and disseminate knowledge to Cyber &amp; Digital Trust consultants and clients where required.
Assist in developing new service offerings for the Cyber &amp; Digital Trust business unit.
Build deep understanding of regional cybersecurity themes and trends, particularly those impacting clients in government, financial services, energy, and critical infrastructure. Work collaboratively with other cybersecurity experts to shape the future of our clients and to bring about positive change.
You will have access to all of the latest training and development tools and the support of the wider PwC network.
Additional Roles &amp; Responsibilities
Skills and Competencies
Strong understanding of emerging cybersecurity technologies and standards.
Experience in cybersecurity strategy development, operating model design, culture transformation, as well as cybersecurity governance, risk and compliance management.
Experience interpreting and applying GCC regulatory frameworks (NCA, SAMA, NESA, PDPL, etc.) and international leading practices (ISO 27001, NIST CSF, etc.).
Special experience in identity and access management, SIEM/SOC, security architecture, cloud and DLP is a plus.
Achievement oriented with the ability to be flexible and adaptive on a daily basis.
Excellent organisational skills, having the ability to prioritise workload whilst being resilient and able to cope well under pressure and meet tight deadlines.
Excellent problem solving skills with a structured thinking process.
Strong connections and relationships with clients in Saudi Arabia and the UAE is a plus.
Strong time-management and organizational skills.
Ability to learn new concepts and carry out technical research.
Proven IT skills in Microsoft Office and G-suite applications.
Language Skills: Excellent communication skills (verbal and written) in English (Arabic is a plus).
The ability and willingness to travel within the Middle East is a MUST.
Educational Qualifications &amp; Certifications
Education: B.A/ B.Sc. in Computer Engineering or related field. M.Sc. in Computer Engineering or related field is preferred. 
 
Candidates are expected to hold or be actively pursuing one or more of the globally recognized certifications relevant to Cybersecurity, Digital Trust and Project Management.
Minimum years experience required
<ul><li>1-3 Years of experience
</li></ul>Additional application instructions
<ul><li>N/A
</li></ul>Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:
Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Accepting Feedback, Accepting Feedback, Active Listening, Automation, Automation Framework Design and Development, Automation Solutions, Budgetary Management, Business Process Automation (BPA), Business Process Improvement, Business Process Outsourcing, Business Transformation, Communication, Continuous Process Improvement, Data Quality Automation, Deliverable Planning, Delivery Excellence, Design Automation, Digital Transformation, Emotional Regulation, Empathy, Inclusion, Intellectual Curiosity, Managed Services, Operational Excellence, Operational Performance Management (OPM) {+ 19 more}
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Available for Work Visa Sponsorship?
Government Clearance Required?
Job Posting End Date</div>

GRC & Cloud Security Analyst

Virtu Thinko

Role Summary: The Cloud Security Engineer will implement and manage security controls, ensuring compliance with defined architecture and regulatory standards. The role includes managing IAM, monitoring, threat protection, and encryption within cloud environments.Key Responsibilities:<ul><li>Deploy and maintain cloud security controls such as WAFs, DDoS protection, and CSPM tools.</li><li>Implement IAM policies, RBAC, and MFA for secure access.</li><li>Configure encryption for data at rest, in transit, and in use.</li><li>Monitor cloud environments for anomalies and unauthorized activities.</li><li>Support incident response, vulnerability management, and compliance reporting.</li></ul>Qualifications &amp; Skills:<ul><li>Bachelor&rsquo;s degree in Computer Science or related field.</li><li>3&ndash;5 years of experience in cloud or cybersecurity engineering.</li><li>Strong knowledge of AWS, Azure, or Google Cloud platforms.</li><li>Hands-on experience with SIEM, SOAR, and vulnerability scanning tools.</li><li>Relevant certifications: AWS Security Specialty, CompTIA Security+, or equivalent.</li></ul>Job Types: Full-time, Contract Contract length: 12 monthsPay: BD600.000 - BD1,000.000 per month

Cloud Security Engineer

Bosch

<div>Company Description 
Bosch Global Software Technologies Private Limited is a 100% owned subsidiary of Robert Bosch GmbH, one of the world's leading global supplier of technology and services, offering end-to-end Engineering, IT and Business Solutions. With over 27,000+ associates, it&rsquo;s the largest software development center of Bosch, outside Germany, indicating that it is the Technology Powerhouse of Bosch in India with a global footprint and presence in the US, Europe and the Asia Pacific region. 
Job Description 
Roles &amp; Responsibilities: 
 
As a Cloud Security Engineer, you will be responsible for the technical security of applications as well as the definition of the requirements for new security features.<ul><li>
You will evaluate and select cloud-native or third-party services to enhance the platform with a focus on security topics. You will be responsible to coordinate their implementation.</li><li>
You will work with analysts, engineers, and data scientists across the organization to continually improve cyber resilience</li><li>
In close collaboration with our IT service providers and other stakeholders from the field of data protection and information security, you will be responsible to plan and implement a cloud security, IoT authorization and authentication concept.</li><li>
As a platform team member and as a security engineer you will e responsible to follow On-prem, Cloud and hybrid data strategy and support/consult in on-prem security topics.</li></ul><ul><li>
Responsible to coordinate and perform vulnerability assessments, IDS/IPS configurations, firewall configuration and firewall rule creation, log analysis.</li><li>
?Scripting &amp; automation with Bash, Python or Go and tools like Terraform; knowledge in Vulnerability Assessment, IDS/IPS configuration/monitoring, Firewalls, Log analysis and understanding of attack vectors and knowledge about different attack strategies (e.g. Man in the middle, DDOS, dictionary attack) desired</li></ul> 
Qualifications 
Educational qualification:
Bachelor&rsquo;s degree in computer science, mathematics or a comparable qualification
Experience:<ul><li>
5+ years of experience in Cloud Security.</li></ul><ul><li>
Strong interpersonal and intercultural skills, agile mindset, team minded</li><li>
Structured and independent way of working, good communication and coordination skills</li><li> 
?Fluent in English (written and spoken), German skills are a plus</li></ul></div>

SO_Cloud_Security_Engineer

PayPal

<div>The Company
PayPal has been revolutionizing commerce globally for more than 25 years. Creating innovative experiences that make moving money, selling, and shopping simple, personalized, and secure, PayPal empowers consumers and businesses in approximately 200 markets to join and thrive in the global economy. 
We operate a global, two-sided network at scale that connects hundreds of millions of merchants and consumers. We help merchants and consumers connect, transact, and complete payments, whether they are online or in person. PayPal is more than a connection to third-party payment networks. We provide proprietary payment solutions accepted by merchants that enable the completion of payments on our platform on behalf of our customers. 
We offer our customers the flexibility to use their accounts to purchase and receive payments for goods and services, as well as the ability to transfer and withdraw funds. We enable consumers to exchange funds more safely with merchants using a variety of funding sources, which may include a bank account, a PayPal or Venmo account balance, PayPal and Venmo branded credit products, a credit card, a debit card, certain cryptocurrencies, or other stored value products such as gift cards, and eligible credit card rewards. Our PayPal, Venmo, and Xoom products also make it safer and simpler for friends and family to transfer funds to each other. We offer merchants an end-to-end payments solution that provides authorization and settlement capabilities, as well as instant access to funds and payouts. We also help merchants connect with their customers, process exchanges and returns, and manage risk. We enable consumers to engage in cross-border shopping and merchants to extend their global reach while reducing the complexity and friction involved in enabling cross-border trade. 
Our beliefs are the foundation for how we conduct business every day. We live each day guided by our core values of Inclusion, Innovation, Collaboration, and Wellness. Together, our values ensure that we work together as one global team with our customers at the center of everything we do &ndash; and they push us to ensure we take care of ourselves, each other, and our communities.
Job Description Summary: Cloud security engineer with focus on native cloud security tool management to protect and proactively identify threats and gaps within a multi cloud environment. This will include the security and operational aspects of infrastructure, build pipelines, cloud native service, stakeholder communications, consulting and advisement of peer security teams, and solution review and approval.
Job Description:
Essential Responsibilities:
<ul><li>Independently apply security best practices to enhance and optimize systems, ensuring robust protection and efficiency, while beginning to understand and align security solutions with business objectives.</li><li>
Partner with peers and internal teams to drive security initiatives, contribute to cross-functional projects, and at times co-lead efforts to strengthen security posture.</li><li>
Analyze and resolve security challenges by adapting standard processes and exploring alternative approaches to address complex threats.</li><li>
Influence the quality, efficiency, and effectiveness of the team through informed decision-making, with a potential impact on other teams.</li><li>
Collaborate with other engineers to gather and incorporate feedback, driving continuous improvements in security processes.</li></ul>
Expected Qualifications:<ul><li>
3+ years relevant experience and a Bachelor&rsquo;s degree OR Any equivalent combination of education and experience.</li></ul>
Additional_Responsibilities_And_Preferred_Qualifications: Top skills required:<ul><li>
Cloud Security knowledge and best practices in GCP, AWS environments.</li><li>
Cloud security posture management understanding to provide remediation advisory.</li><li>
Cloud security evidence collection and forensics.</li><li>
Experience with infrastructure-as-code tools like CloudFormation, Terraform, etc.</li><li>
Excellent communication and documentation skills</li><li>
Hands-on experience with Docker containers in Kubernetes environments</li><li>
Collaborative mindset to work along cross-functional teams.</li></ul>
Nice to have skills:<ul><li>
Cloud native security tools management.</li><li>
Manage CSPM solution. Preferably Wiz.</li><li>
Understanding on vulnerability management on cloud environments (such as CSPM findings, configuration findings, etc.).</li><li>
Industry cybersecurity standards (such as PCI, ISO 27000 Family, NIST, CIS, SOC 2, etc.)</li><li>
Basic DFIR processes in cloud environments.</li><li>
Collaborative mindset.</li><li>
Agile methodology knowledge and understanding.</li></ul>
In their day-to-day they will:<ul><li>
Onboarding Cloud accounts (such as Azure, AWS &amp; GCP) &ndash; this includes access grant, enabling policies, configuring baselines, configuring agents (if applicable), verifying health status</li><li>
Administer CSPM solution &ndash; this includes managing user roles, audit logs, manage API access</li><li>
Discover cloud assets &ndash; this includes gaining visibility and manage cloud assets</li><li>
Manage Security policies and Benchmarks &ndash; this includes configuring CSPs specific security policies, industry specific compliance policies (such as PCI), benchmarks standards (such as CIS, NIST, etc.)</li><li>
Respond to alerts &ndash; this includes monitor, investigate and triage incidents based on actionable alerts</li><li>
Manage OS hardening &ndash; this includes administer operating system baseline and hardening</li><li>
Integration with 3rd party systems &ndash; this includes manage changes, requests on integration with other systems (such as ITSM and CI/CD Tools)</li><li>
Remediation guidance &ndash; this includes providing recommendations to the stakeholders to fix the potential threats, applying configurations on the systems to maintain IT security regulatory compliance and standards</li><li>
Manage reports &ndash; this includes providing reports to the business and relevant stakeholders</li></ul>
PayPal does not charge candidates any fees for courses, applications, resume reviews, interviews, background checks, or onboarding. Any such request is a red flag and likely part of a scam. To learn more about how to identify and avoid recruitment fraud please visit https://careers.pypl.com/contact-us.
For the majority of employees, PayPal's balanced hybrid work model offers 3 days in the office for effective in-person collaboration and 2 days at your choice of either the PayPal office or your home workspace, ensuring that you equally have the benefits and conveniences of both locations. 
Our Benefits:
At PayPal, we&rsquo;re committed to building an equitable and inclusive global economy. And we can&rsquo;t do this without our most important asset-you. That&rsquo;s why we offer benefits to help you thrive in every stage of life. We champion your financial, physical, and mental health by offering valuable benefits and resources to help you care for the whole you.
We have great benefits including a flexible work environment, employee shares options, health and life insurance and more. To learn more about our benefits please visit https://www.paypalbenefits.com 
 
Who We Are:
To learn more about our culture and community visit https://about.pypl.com/who-we-are/default.aspx 
 
Commitment to Diversity and Inclusion
PayPal provides equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, pregnancy, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state, or local law. In addition, PayPal will provide reasonable accommodations for qualified individuals with disabilities. If you are unable to submit an application because of incompatible assistive technology or a disability, please contact us at paypalglobaltalentacquisition@paypal.com.
Belonging at PayPal:
Our employees are central to advancing our mission, and we strive to create an environment where everyone can do their best work with a sense of purpose and belonging. Belonging at PayPal means creating a workplace with a sense of acceptance and security where all employees feel included and valued. We are proud to have a diverse workforce reflective of the merchants, consumers, and communities that we serve, and we continue to take tangible actions to cultivate inclusivity and belonging at PayPal. 
Any general requests for consideration of your skills, please Join our Talent Community. 
We know the confidence gap and imposter syndrome can get in the way of meeting spectacular candidates. Please don&rsquo;t hesitate to apply.</div>

Multi-Cloud Security Engineer

Holland & Barrett International Limited

About the role: Join Our Team at Holland & Barrett! Are you passionate about cloud security and looking to make a significant impact? Holland & Barrett is seeking a Cloud Security Specialist to help us define and implement our cloud security strategy. If you're an experienced professional eager to work with cutting-edge technology and collaborate with diverse teams, we want to hear from you! Key Responsibilities: <ul> <li>Security Strategy: Help define and execute the Holland & Barrett cloud security strategy, partnering with platform and Site Reliability Engineering (SRE) teams to build robust infrastructure that supports our business.</li><li>Perimeter Security: Establish platform perimeter security by implementing controls at ingress and egress points, including creating and maintaining an edge network with a Web Application Firewall (WAF), Distributed Denial of Service (DDoS) protection, and a Content Delivery Network (CDN).</li><li>Access Control: Establish an access control baseline focusing on the principle of least privilege and segregation of duties. Monitor and enforce these controls once roles and permissions are set.</li><li>Security Controls: Design, implement, and maintain security controls to prevent, detect, and remediate insecure configurations, including defining and disseminating secure AWS/infrastructure baselines.</li><li>Standards Development: Own the development and maintenance of tailored security standards and guidelines, creating reusable resources for various development teams.</li><li>AWS Security Services: Establish and manage AWS security services, including certificate authorities, encryption services, insecure configuration scanners, and security control canaries.</li></ul> Key requirements: Essential: <ul> <li>5+ years of experience in cloud security, particularly with AWS, and at least 2+ years in software development.</li><li>Strong understanding of cloud and application security concepts, including secure coding practices, threat modeling, vulnerability management, and access control mechanisms.</li><li>Experience with AWS, Kubernetes, Service Mesh, API gateways, and API Security (authentication and authorization).</li><li>Proficiency in programming languages such as Python, JavaScript, GoLang, Terraform, CloudFormation (AWS), and AWS CDK.</li><li>Familiarity with Agile methodologies like SCRUM, along with proven project management skills to manage multiple security projects effectively.</li></ul> Desired: <ul> <li>Ability to work independently, take initiative, and maintain a keen attention to detail, ensuring high security standards.</li><li>Strong communication and interpersonal skills, facilitating effective collaboration with both technical and non-technical teams.</li></ul> Why Holland & Barrett? At Holland & Barrett, we are dedicated to promoting health and well-being while ensuring the highest standards of cloud security. Join our team and be part of a company that values innovation and security. Ready to Make an Impact? If you're excited about cloud security and want to contribute to a secure future, apply now! We look forward to welcoming you to our team. We support flexibility and productivity of our employees by hybrid working arrangements. Although your role will be based in London (or Nuneaton, or Amsterdam) you will be required to travel only occasionally to our Hubs in Nuneaton or London or to any other location of H&B. What we offer: Benefits Wellbeing & Lifestyle Benefits <ul> <li>Health Cash Plan </li><li>Life Assurance </li><li>Incentive Scheme</li><li>Virtual GP </li><li>Private Medical</li><li>FREE at-home blood test kit </li><li>Holiday Purchase option </li><li>Pension Contribution </li><li>Access to 'Wellhub' with gyms, studios and wellbeing apps </li></ul> Discounts & Savings <ul> <li>25% Colleague Discount with FREE Next Day Delivery </li><li>Exclusive Discounts from a wide range of partners </li><li>£/€50 Annual Product Allowance to spend in store </li></ul> Learning & Development <ul> <li>Access to a variety of learning opportunities, including Level 2-5 Apprenticeships, Workshops and our Digital Learning Library </li><li>AND MORE! </li></ul> We're passionate about helping every colleague thrive across all dimensions of wellbeing, and we're committed to having a diverse and inclusive workplace. In line with our EPIC values (Expertise, Pioneering, Inclusive, Caring), we embrace and actively celebrate all our colleagues' unique and varying experiences, backgrounds, identities and cultures - I am me, we are H&B. Holland & Barrett does not accept unsolicited resumes from search firms/recruiters. Please do not forward resumes to our job alias, employees, or any other company location. Holland & Barrett is not and will not be responsible for any fees if a candidate submitted by a search firm/recruiter unless otherwise agreed with respect to specific open position(s).

Senior Cloud Security Engineer

Client of Michael Page

<div> <div> <ul> <li>Manage and secure cloud infrastructure and services, primarily within Microsoft Azure</li> <li>Configure, monitor, and optimise Azure-native security tools and related platforms</li> <li>Perform threat hunting, vulnerability scanning, and incident response within Azure environments</li> <li>Manage alerts, tickets, and day-to-day operational security tasks</li> <li>Support firewall and network security operations, including upcoming technology transitions</li> <li>Support in-house application and Azure application security - including patching, hardening, and periodic pen-testing (awareness required, not hands-on)</li> <li>Maintain and update security documentation, dashboards, and monthly metrics reports</li> <li>Participate in business continuity and disaster recovery planning</li> <li>Stay updated on evolving cloud threats and advise on preventive measures</li> <li>Collaborate closely with the global IT and cybersecurity teams</li> </ul> </div> </div>

Cloud Security Engineer (Azure)

Role Summary: The SOC Analyst will provide 24/7 security monitoring and threat detection across all cloud and hybrid environments. The role focuses on identifying, investigating, and escalating security incidents to ensure proactive protection.Key Responsibilities:<ul><li>Monitor cloud and hybrid infrastructure for security events and anomalies.</li><li>Analyze alerts from SIEM and CSPM systems to identify true positives.</li><li>Escalate incidents and support triage and investigation activities.</li><li>Document incidents and support post-incident analysis.</li><li>Participate in continuous threat-hunting and improvement of detection rules.</li></ul>Qualifications &amp; Skills:<ul><li>Diploma or Bachelor&rsquo;s in Cybersecurity or related field.</li><li>2&ndash;4 years of SOC experience.</li><li>Familiarity with cloud-native monitoring tools and SIEM platforms (e.g., Azure Sentinel, Splunk).</li><li>Strong understanding of incident response and digital forensics basics.</li><li>Preferred certifications: CEH, CompTIA CySA+, or Azure Security Engineer Associate.</li></ul>Job Types: Full-time, Contract Contract length: 12 monthsPay: BD600.000 - BD1,000.000 per month

SOC Analyst (Cloud Security Operations)

Search 10000+ Cloud security analyst jobs near you this November. New roles added regularly across leading industries. Apply today.