[IT Delivery Center] Cloud Security Analyst

Eurofins Scientific is an international life sciences company, providing a unique range of analytical testing services to clients across multiple industries, to make life and our environment safer, healthier and more sustainable. From the food you eat, to the water you drink, to the medicines you rely on, Eurofins laboratories work with the biggest companies in the world to ensure the products they supply are safe, their ingredients are authentic, and labelling is accurate.

Eurofins is dedicated to delivering testing services that contribute to the health and safety of society and the planet, and to its corporate responsibility to protect the environment and ensure diversity, equity, and inclusion across the entire network of Eurofins companies.

We are seeking an experienced Cloud Security Analyst to join our Global Information Security team.

In this role, you will lead initiatives focused on strengthening Eurofins' cloud security posture across Microsoft Azure, Amazon Web Services, and Google Cloud Platform. You will serve as a trusted advisor for cloud security, providing technical leadership, governance guidance, and strategic direction for cloud security operations and risk management.

You will play a key role in the operation and evolution of Eurofins' Cloud-Native Application Protection Platform (CNAPP), cloud governance framework, and security monitoring processes. The position requires close collaboration with Cloud Engineering Teams, Security Architects, Cloud Architects, and business stakeholders globally.

You will be responsible for:

CNAPP Platform Management

• Act as a (senior) SME for Eurofins' Cloud-Native Application Protection Platform (CNAPP).
• Drive onboarding and adoption of cloud tenants and subscriptions.
• Maintain and optimize detection coverage, policies, controls, and reporting capabilities.

Cloud Security Governance

• Define, maintain, and improve cloud security baselines, guardrails, and standards.
• Support the review and approval process for security exceptions and risk acceptance requests.
• Partner with Security Architects and Engineering Teams to implement enterprise cloud security controls.

Risk Management & Security Posture Improvement

• Prioritize remediation initiatives based on business risk and threat exposure.
• Track and drive closure of high-risk vulnerabilities and misconfigurations.

DevSecOps & Automation

• Drive security automation and infrastructure-as-code security controls.
• Identify opportunities to reduce operational effort through automation.

Leadership & Stakeholder Management

• Build trusted relationships with platform owners and technical leaders.
• Participate in technical workshops and knowledge-sharing initiatives.
• Mentor and support junior Cloud Security Analysts.

What You Will Drive

In this role you will influence and improve:

• Enterprise Cloud Security Posture
• Vulnerability and risk reduction programs
• Cloud security automation initiatives
• CNAPP platform maturity and adoption
• Security awareness among Cloud Engineering Team

Education

• Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Engineering, or a related field.

Experience

• 3+ years of experience in Information Security or Cybersecurity,
• 1+ years of hands-on cloud security experience,
• Experience working with enterprise-scale cloud environments,
• Proven experience managing or operating cloud security solutions,
• Experience leading technical initiatives and collaborating across multiple teams.

Required Technical Skills

• Advanced knowledge of Microsoft Azure security services.
• Strong understanding of AWS security services.
• Good knowledge of Google Cloud Platform security controls.
• Experience securing Kubernetes and containerized environments.
• Cloud Identity and Access Management (IAM).
• Vulnerability management and threat remediation processes.
• Understanding of Security Architecture and threat modelling concepts.
• Familiar with risk management methodologies.
• DevSecOps and CI/CD security practices.
• Infrastructure-as-Code security controls.
• Security monitoring and cloud compliance frameworks.

Advantageous Technical Skills

• Experience with Wiz or other leading CNAPP platforms.
• Microsoft Defender for Cloud.
• M365 Desired State Configuration (M365 DSC).
• Terraform, Bicep, or similar automation frameworks.
• BMC Helix integration and workflow automation.
• Multi-cloud governance and compliance programs.
• Security automation and orchestration tooling.

Preferred Certifications

One or more of the following certifications are highly desirable:

• CISSP
• CCSP
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• AWS Certified Security Specialty
• Google Professional Cloud Security Engineer
• Certified Kubernetes Security Specialist (CKS)
• TOGAF (advantageous)

Professional Competencies

The successful candidate will demonstrate:

• Engineering thinking
• Technical leadership
• Strong stakeholder management
• Good communication skills
• Continuous improvement mindset

We support your development! Do you feel you don’t match 100% of the requirements? Don’t hesitate to apply anyway! Eurofins companies are committed to supporting your career development.

We embrace diversity! As an Equal Opportunity Employer, the Eurofins network of companies believes in strength and innovation through diversity. We prohibit discrimination against employees or applications based on gender identity and/or expression, race, nationality, age, religion, sexual orientation, disability, and everything else that makes employees of Eurofins companies unique.

Sustainability matters to us! We are well on our way to achieving our objective of carbon neutrality by 2025, through a combination of emission reduction and compensation initiatives. We encourage our laboratory leaders to make sustainable changes at their local level, and in addition to their initiatives we count on our dedicated carbon reduction team to help us to achieve this goal!

Find out more on our Careers page: https://careers.eurofins.com/

Company description: Eurofins Scientific is an international life sciences company, providing a unique range of analytical testing services to clients across multiple industries, to make life and our environment safer, healthier and more sustainable. From the food you eat, to the water you drink, to the medicines you rely on, Eurofins laboratories work with the biggest companies in the world to ensure the products they supply are safe, their ingredients are authentic and labelling is accurate.

The Eurofins network of companies believes that it is a global leader in food, environment, pharmaceutical and cosmetic product testing and in discovery pharmacology, forensics, advanced material sciences and agroscience contract research services. It is also one of the market leaders in certain testing and laboratory services for genomics, and in the support of clinical studies, as well as in biopharma contract development and manufacturing. It also has a rapidly developing presence in highly specialised and molecular clinical diagnostic testing and in-vitro diagnostic products.

In over 37 years, Eurofins has grown from one laboratory in Nantes, France to ca. 63,000 staff across a decentralised and entrepreneurial network of more than 950 laboratories in over 1,000 companies across 60 countries. Eurofins companies offer a portfolio of over 200,000 analytical methods to evaluate the safety, identity, composition, authenticity, origin, traceability and purity of biological substances and products.

In 2024, Eurofins generated total revenues of EUR 6.95 billion, and has been among the best performing stocks in Europe over the past 20 years.