Information Security Analyst - Cloud & AppSec

Summary
MathWorks has a hybrid work model that enables staff members to split their time between office and home. The hybrid model provides the advantage of having both in-person time with colleagues and flexible at-home life optimizations. Learn More: https://www.mathworks.com/company/jobs/resources/applying-and-interviewing.html#onboarding.
Interested in contributing to and improving the overall cloud security of a company who is accelerating the pace of engineering and science? Come join MathWorks, where you will be responsible for cloud security oversight and engineering secure solutions.
MathWorks nurtures growth, appreciates inclusivity, encourages initiative, values teamwork, shares success, and rewards excellence.
Responsibilities
You will help triage cloud security alerting and drive incident response across our cloud deployments. Specifically, you will:
Monitor, triage, and remediate alerts using our SIEM and CSPM tools
Lead on prem to cloud and cloud native incident investigations including containment, forensics, and root cause analysis
Administer and tune cloud security services including IAM, KMS, GuardDuty, WAF, and SCPs
Understand existing security controls across EKS, serverless, and container workloads
Translate cloud security findings into clear, actionable guidance for engineering and business stakeholders
Collaborate with international teams on security initiatives and compliance requirements
Experience with containers and orchestration tools and CLI
Knowledge on CI/CD pipeline
Minimum Qualifications
A bachelor's degree and 6 years of professional work experience (or a master's degree and 3 years of professional work experience, or a PhD degree, or equivalent experience) is required.
Additional Qualifications
Certifications in Cloud Security or Cybersecurity are a plus
Experience with forensics, incident response, threat analysis
Proficiency with IaC scanning and Policy-as-Code
Familiarity with SAST/DAST tooling for application security
Working knowledge of regulatory or compliance frameworks is a plus
Experience working with globally distributed teams

Work arrangement
Hybrid