Bloomberg

Global financial data, news, analytics provider

Senior Cloud Security and Vulnerability Analyst - Threat and Vulnerability Management Cloud

Security Engineering & ArchitecturePosted on Nov 11

Full-timeLondon, UKNo salary listedIn-person

About the Job

Requirements

Significant experience in cloud security, vulnerability management, or a related technical security discipline.
Strong knowledge of public-cloud architecture, services, and security concepts.
Experience assessing vulnerabilities and security findings within complex technology environments.
A strong understanding of risk-based vulnerability prioritization and relevant industry standards.
The ability to interpret technical, threat, and business information to make clear and defensible security decisions.
Experience analyzing large or complex datasets, with practical scripting, query, or API skills.
A good understanding of operating systems, cloud-native technologies, and security-hardening principles.
Strong written and verbal communication skills, with the ability to influence technical teams and senior stakeholders.
Experience taking ownership of complex work and delivering improvements across multiple teams.

Responsibilities

Assess and prioritize vulnerabilities and security exposures across public-cloud and cloud-native environments.
Apply technical, threat, and business context to determine risk and recommend appropriate remediation or mitigating controls.
Partner with engineering, platform, and security teams to validate findings and manage them through remediation, exception, or closure.
Identify opportunities to improve cloud security coverage, technical controls, and secure engineering practices.
Improve vulnerability-management workflows, assessment standards, data quality, and reporting.
Use data analysis and automation to investigate findings and make processes more scalable and effective.
Lead technical investigations and improvement initiatives through to measurable delivery.
Produce meaningful metrics and communicate risk, progress, and recommendations to technical and senior stakeholders.
Share knowledge and provide guidance to other analysts and partner teams.

Desired Qualifications

Experience working across multiple public-cloud providers.
Experience with enterprise cloud-security or vulnerability-management platforms.
Knowledge of container, Kubernetes, infrastructure-as-code, or CI/CD security.
Experience developing security metrics, dashboards, or automated assessment processes.
Familiarity with recognized cloud-security and risk-management frameworks.
Relevant cloud or security certifications.
A Bachelor's degree in Computer Science, Engineering, Cybersecurity, a related discipline, or equivalent practical experience.

Our team

The Threat and Vulnerability Management Team is dedicated to making Bloomberg’s systems and technologies as secure as possible. We partner with technical teams across Bloomberg to identify, assess and reduce security risk, helping to protect the confidentiality, integrity and availability of our systems and the data we process.

Within TVM, the Cloud team focuses on identifying and managing vulnerabilities and security exposures across Bloomberg’s public-cloud and cloud-native environments.

We report to the Chief Information Security Office, which helps ensure that Bloomberg products, systems, networks and applications are built and maintained securely.

We work on purpose. Come find yours.

What’s the role?

We are seeking a Senior Cloud Security and Vulnerability Analyst to help identify, assess and reduce security risk across Bloomberg’s public-cloud environments.

You will analyze vulnerabilities and broader cloud security exposures, determine their significance within Bloomberg’s environment and work with technical teams to drive appropriate remediation. You will combine security tooling, threat intelligence, technical analysis and business context to make informed, risk-based decisions.

As a senior member of the team, you will lead complex assessments and improvement initiatives, help strengthen our vulnerability management capabilities and contribute to the strategic direction of the wider program.

We’ll trust you to:

Assess and prioritize vulnerabilities and security exposures across public-cloud and cloud-native environments.
Apply technical, threat and business context to determine risk and recommend appropriate remediation or mitigating controls.
Partner with engineering, platform and security teams to validate findings and manage them through remediation, exception or closure.
Identify opportunities to improve cloud security coverage, technical controls and secure engineering practices.
Improve vulnerability-management workflows, assessment standards, data quality and reporting.
Use data analysis and automation to investigate findings and make processes more scalable and effective.
Lead technical investigations and improvement initiatives through to measurable delivery.
Produce meaningful metrics and communicate risk, progress and recommendations to technical and senior stakeholders.
Share knowledge and provide guidance to other analysts and partner teams.

You’ll need to have:

Significant experience in cloud security, vulnerability management or a related technical security discipline.
Strong knowledge of public-cloud architecture, services and security concepts.
Experience assessing vulnerabilities and security findings within complex technology environments.
A strong understanding of risk-based vulnerability prioritization and relevant industry standards.
The ability to interpret technical, threat and business information to make clear and defensible security decisions.
Experience analyzing large or complex datasets, with practical scripting, query or API skills.
A good understanding of operating systems, cloud-native technologies and security-hardening principles.
Strong written and verbal communication skills, with the ability to influence technical teams and senior stakeholders.
Experience taking ownership of complex work and delivering improvements across multiple teams.

We’d love to see:

Experience working across multiple public-cloud providers.
Experience with enterprise cloud-security or vulnerability-management platforms.
Knowledge of container, Kubernetes, infrastructure-as-code or CI/CD security.
Experience developing security metrics, dashboards or automated assessment processes.
Familiarity with recognized cloud-security and risk-management frameworks.
Relevant cloud or security certifications.
A Bachelor’s Degree in Computer Science, Engineering, Cybersecurity, a related discipline, or equivalent practical experience.

If indicated, please note that years of experience are a guide; we will consider applications from all candidates who can demonstrate the skills necessary for the role.

Discover what makes Bloomberg unique - watch our podcast series for an inside look at our culture, values, and the people behind our success.

About the Company

Bloomberg

Global financial data, news, analytics provider

Bloomberg provides financial data, news, and analysis to help professionals make informed decisions and operate more transparently and efficiently. Its products deliver trusted information and insights through technology platforms that connect global financial communities, enable collaboration, and support decision-making. The company differentiates itself by offering broad, reliable data and news across markets, strong customer focus, and a culture that emphasizes collaboration, broad perspective, and doing the right thing for clients, people, and communities. Bloomberg’s goal is to improve market transparency and efficiency by delivering accurate information and tools that empower customers to act confidently and ethically.

Company size: 10,001+
Company stage: Not listed
Total funding: Not listed
Headquarters: New York City, New York
Founded: 1981

Recently Posted Jobs

Explore more opportunities at Bloomberg

See more jobs