Information Security Analyst - Cloud & AppSec

Summary

MathWorks has a hybrid work model that enables staff members to split their time between office and home. The hybrid model provides the advantage of having both in-person time with colleagues and flexible at-home life optimizations. Learn More: https://www.mathworks.com/company/jobs/resources/applying-and-interviewing.html#onboarding.

Interested in contributing to and improving the overall cloud security of a company who is accelerating the pace of engineering and science Come join MathWorks, where you will be responsible for cloud security oversight and engineering secure solutions.

MathWorks nurtures growth, appreciates inclusivity, encourages initiative, values teamwork, shares success, and rewards excellence.

Responsibilities

You will help triage cloud security alerting and drive incident response across our cloud deployments. Specifically, you will:

• Monitor, triage, and remediate alerts using our SIEM and CSPM tools
• Lead on prem to cloud and cloud native incident investigations including containment, forensics, and root cause analysis
• Administer and tune cloud security services including IAM, KMS, GuardDuty, WAF, and SCPs
• Understand existing security controls across EKS, serverless, and container workloads
• Translate cloud security findings into clear, actionable guidance for engineering and business stakeholders
• Collaborate with international teams on security initiatives and compliance requirements
• Experience with containers and orchestration tools and CLI
• Knowledge on CI/CD pipeline
  
  

Minimum Qualifications

• A bachelor's degree and 6 years of professional work experience (or a master's degree and 3 years of professional work experience, or a PhD degree, or equivalent experience) is required.
  
  

Additional Qualifications

• Certifications in Cloud Security or Cybersecurity are a plus
• Experience with forensics, incident response, threat analysis
• Proficiency with IaC scanning and Policy-as-Code
• Familiarity with SAST/DAST tooling for application security
• Working knowledge of regulatory or compliance frameworks is a plus
• Experience working with globally distributed teams