(Senior) Information Security Analyst (Cloud Security)
(Cloud Security, GSC Information Security)
Bengaluru, India
Full-time
Company Description
Eurofins Scientific is an international life sciences company which provides a unique range of analytical testing services to clients across multiple industries. The Group believes it is the world leader in food, environment and pharmaceutical products testing and in agroscience CRO services. It is also one of the global independent market leaders in certain testing and laboratory services for genomics, discovery pharmacology, forensics, advanced material sciences and for supporting clinical studies. In addition, Eurofins is one of the key emerging players in specialty clinical diagnostic testing in Europe and the USA.
Group's key figures are approx. 4.56 billion Euros turnover, over 800 laboratories across 50 countries and more than 50,000 staff.
Job Description
We are seeking an experienced Cloud Security Analyst to join our Global Information Security team.
In this role, you will lead initiatives focused on strengthening Eurofins' cloud security posture across Microsoft Azure, Amazon Web Services, and Google Cloud Platform. You will serve as a trusted advisor for cloud security, providing technical leadership, governance guidance, and strategic direction for cloud security operations and risk management.
You will play a key role in the operation and evolution of Eurofins' Cloud-Native Application Protection Platform (CNAPP), cloud governance framework, and security monitoring processes. The position requires close collaboration with Cloud Engineering Teams, Security Architects, Cloud Architects, and business stakeholders globally.
You will be responsible for:
CNAPP Platform Ownership
Act as a (senior) SME for Eurofins' Cloud-Native Application Protection Platform (CNAPP).
Drive onboarding and adoption of cloud tenants and subscriptions.
Maintain and optimize detection coverage, policies, controls, and reporting capabilities.
Define operational processes and best practices for cloud security posture management.
Ensure platform configurations remain aligned with evolving security requirements and cloud technologies.
Cloud Security Governance
Define, maintain, and improve cloud security baselines, guardrails, and standards.
Support the review and approval process for security exceptions and risk acceptance requests.
Partner with Security Architects and Engineering Teams to implement enterprise cloud security controls.
Contribute to security policies, procedures, and governance frameworks.
Promote consistency across Azure, AWS, GCP, Kubernetes, and SaaS environments.
Risk Management & Security Posture Improvement
Lead risk analysis activities related to cloud infrastructure, platforms, and services.
Prioritize remediation initiatives based on business risk and threat exposure.
Track and drive closure of high-risk vulnerabilities and misconfigurations.
Establish measurable security posture improvement objectives.
Develop KPIs, metrics, and executive reporting for cloud security initiatives.
DevSecOps & Automation
Promote security integration with CI/CD pipelines.
Drive security automation and infrastructure-as-code security controls.
Identify opportunities to reduce operational effort through automation.
Support implementation of automated compliance validation and continuous monitoring.
Improve developer security enablement through secure-by-design practices.
Leadership & Stakeholder Management
Serve as the primary point of contact for complex cloud security matters.
Build trusted relationships with platform owners and technical leaders.
Present cloud security posture and risk trends to Senior Management.
Mentor and support junior Cloud Security Analysts.
Lead technical workshops and knowledge-sharing initiatives.
Influence cloud security strategy and roadmap decisions.