Senior Cloud Security and Vulnerability Analyst - TVM Cloud

at Bloomberg

📍 New York City, United States

USD 155,000-190,000 per year

SENIOR

✅ On-site

Tech Stack
Tag name is followed by "@" symbol and proficiency level value. About proficiency levels:

1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;

3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;

7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;

10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.

API @ 4 CI/CD @ 4 Communication @ 7 Data Analysis Kubernetes @ 4 Prioritization @ 7 Security @ 4

Details

The Threat and Vulnerability Management Team helps make Bloomberg’s systems and technologies secure by identifying, assessing and reducing security risk. The Cloud team focuses on vulnerabilities and security exposures across Bloomberg’s public-cloud and cloud-native environments.

Responsibilities

Assess and prioritize vulnerabilities and security exposures across public-cloud and cloud-native environments.
Apply technical, threat and business context to determine risk and recommend remediation or mitigating controls.
Partner with engineering, platform and security teams to validate findings and manage them through remediation, exception or closure.
Identify opportunities to improve cloud security coverage, technical controls and secure engineering practices.
Improve vulnerability-management workflows, assessment standards, data quality and reporting.
Use data analysis and automation to investigate findings and make processes more scalable and effective.
Lead technical investigations and improvement initiatives through to measurable delivery.
Produce metrics and communicate risk, progress and recommendations to technical and senior stakeholders.
Share knowledge and provide guidance to other analysts and partner teams.

Requirements

Significant experience in cloud security, vulnerability management or a related technical security discipline.
Strong knowledge of public-cloud architecture, services and security concepts.
Experience assessing vulnerabilities and security findings within complex technology environments.
Strong understanding of risk-based vulnerability prioritization and relevant industry standards.
Ability to interpret technical, threat and business information to make clear and defensible security decisions.
Experience analyzing large or complex datasets, with practical scripting, query or API skills.
Good understanding of operating systems, cloud-native technologies and security-hardening principles.
Strong written and verbal communication skills, with the ability to influence technical teams and senior stakeholders.
Experience taking ownership of complex work and delivering improvements across multiple teams.
Experience working across multiple public-cloud providers is desirable.
Experience with enterprise cloud-security or vulnerability-management platforms is desirable.
Knowledge of container, Kubernetes, infrastructure-as-code or CI/CD security is desirable.
Experience developing security metrics, dashboards or automated assessment processes is desirable.
Familiarity with recognized cloud-security and risk-management frameworks is desirable.
Relevant cloud or security certifications are desirable.
Bachelor’s degree in Computer Science, Engineering, Cybersecurity, a related discipline, or equivalent practical experience.

Benefits

Benefits may include merit increases, incentive compensation for exempt roles, paid holidays, paid time off, medical, dental, vision, short- and long-term disability benefits, 401(k) matching, life insurance and wellness programs. Compensation also includes a potential bonus.

Salary range: $155,000–$190,000 USD annually.