Cloud Security Specialist - CNAPP

Responsibilities

• Partner with stakeholders (architects, cloud/container engineers, capability leads and control owners) to capture and document functional and non-functional requirements for CNAPP-driven assessment, triage and reporting.
• Provide guidance on interpreting security findings, risk context and control expectations; support consistent triage and assessment approaches.
• Shape work for agile delivery, including goals, dependencies and sufficient technical detail for engineering execution.
• Work with CNAPP engineering and partner teams (Cloud Services, Containers and Cyber) to maintain traceability from requirements to technical design to delivered capability.
• Support stakeholders new to CNAPP on consuming outputs (findings, risk signals and posture metrics) and translate needs into clear requirements.
• Run sessions to agree design approaches, validate solutions and drive sign-off for assessment/triage workflows and reporting outputs.
• Define a validation approach, including acceptance criteria where needed, to ensure delivered capabilities meet agreed requirements and are usable for CSAT assessment/testing objectives.
• Map and support integrations/APIs between CNAPP components and systems, including ticketing workflows, downstream reporting and data lake integrations for global metrics.

Technical Skill Set Required

• 5+ years’ experience as a cloud security SME in cloud projects and security and compliance platforms.
• Hands-on knowledge of cybersecurity vulnerability scanning, configuration baselines, compliance and inventory, such as CNAPP and CSPM.
• Proven experience in Agile/Scrum environments writing epics, features and user stories.
• Experience in Databricks or an equivalent data engineering platform is preferred.
• Excellent stakeholder management, facilitation and communication skills.
• Experience with API integrations, microservices, container orchestration (Kubernetes, AWS and GCP cloud) and DevOps processes.
• Familiarity with regulatory frameworks such as PCI-DSS and CIS benchmarks is preferred.
• Relevant public-cloud certifications, such as AWS, GCP or Azure, are preferred.

We offer

• A full-time contract; B2B collaboration is also possible.
• All necessary work equipment, including a computer and monitor.
• Certification and training opportunities.
• Opportunity to engage in a subsequent project after completion of the current project.
• Medicover medical care with dental care.
• Medicover Benefits platform / Medicover Sport card.
• Collaboration with Mistral AI.
• Employee referral program.
• Group life insurance.
• Opportunity to relocate and work in different branches.