Senior Cloud Security and Vulnerability Analyst - TVM Cloud

In this role you will lead vulnerability management across Bloomberg’s public-cloud and cloud-native environments, translating security findings into risk-informed actions. You’ll work with engineering and security teams to drive remediation and strengthen cloud security controls. You’ll apply tooling, threat intelligence, and data analysis to scale processes and deliver measurable improvements. This position offers impact through shaping vulnerability management practices and contributing to the program’s strategic direction. You will collaborate with cross-functional teams to reduce risk and protect Bloomberg’s data and systems.

• Assess and prioritise vulnerabilities and security exposures in cloud environments
• Apply threat, technical, and business context to determine risk and remediation
• Collaborate with engineering and security teams to manage remediation or closure
• Identify opportunities to improve cloud security coverage and secure engineering practices
• Improve vulnerability-management workflows, data quality, and reporting
• Lead investigations and improvement initiatives through to delivery
• Produce metrics and communicate risk and recommendations to stakeholders
• Share knowledge and provide guidance to other analysts and partner teams

• Significant experience in cloud security or vulnerability management
• Strong knowledge of public-cloud architecture and security concepts
• Experience assessing vulnerabilities in complex environments
• Understanding of risk-based vulnerability prioritisation and standards
• Ability to interpret technical, threat, and business information for secure decisions
• Experience analyzing large datasets with scripting, queries or APIs
• Solid understanding of OS, cloud-native tech, and security hardening
• Strong written and verbal communication skills and stakeholder influence
• Experience owning complex work across multiple teams

• influencing technical teams
• cross-functional collaboration
• clear communication
• cloud security
• vulnerability management
• security metrics and dashboards