Security Analyst

Security Analyst – Cloudbeds Join to apply for the Security Analyst role at Cloudbeds. What Makes Us Unique At Cloudbeds, we’re not just building software, we’re transforming hospitality. Our intelligently designed platform powers properties across 150 countries, processing billions in bookings annually. From independent properties to hotel groups, we help hoteliers transform operations and uplevel their commercial strategy through a unified platform that integrates with hundreds of partners. And we do it with a completely remote team. Imagine working alongside global innovators to build AI‑powered solutions that solve hoteliers' biggest challenges. Since our founding in 2012, we've become the World's Best Hotel PMS Solutions Provider and landed on Deloitte's Technology Fast 500 again in 2024 – but we’re just getting started. How You'll Make an Impact As a Security Analyst, you will play a crucial role in delivering an exceptional and secure product experience to our customers around the world while ensuring the security and compliance of our systems, customers, and data. You will work cross‑functionally with individuals at every level across the organization—from Engineering to Sales and Executives—to communicate security best practices and enable the delivery of trusted, scalable, and reliable products leveraging modern technologies, tools, and standards. Your responsibilities span the full security landscape, including implementation and ongoing monitoring of security tooling, responding to Requests for Proposals from prospective customers, daily monitoring of endpoint detection platforms, conducting penetration tests, discovering and remediating application vulnerabilities, managing compliance requests, leading company‑wide security training programs, and driving other security‑owned initiatives. Our Security Team Our Security team thrives on open communication and mutual trust—you empower each other to work independently while providing the support needed to tackle high‑impact challenges. We’re proactive problem‑solvers who aren’t afraid to roll up our sleeves and get hands‑on, balancing our drive to work hard with a strong respect for work‑life balance and long‑term success. What You Bring to the Team Lead incident response efforts, including monitoring security alerts across multiple platforms, managing threat takedowns, and handling customer‑reported security incidents such as phishing alerts and data breaches. Develop and test incident response plans through scenario exercises and continuous improvement of our security playbooks and procedures. Implement and manage application security tooling—including SAST/DAST solutions in CI/CD pipelines, container scanning, and code analysis platforms to strengthen our security posture. Conduct forensic analysis and investigations to identify attack vectors, assess impact, and drive remediation efforts across the organization. Build and maintain security policies, deliver company‑wide security awareness training and phishing campaigns, and drive security best practices across all teams. Support compliance certification initiatives—including PCI Level 1 audits, vulnerability management programs, and cross‑team coordination on remediation efforts. Manage compliance requests and security reviews—including GDPR/CCPA data privacy requirements, Quebec Law 25, third‑party security questionnaires, and prospective customer assessments. What Sets You Up for Success A Bachelor's Degree in a relevant field and 3+ years of experience in information security, or equivalent practical experience. Excellent communication and diplomacy skills, collaborating effectively across diverse, multilingual teams and influencing stakeholders at all levels. Deep knowledge of compliance frameworks and standards—including PCI DSS Level 1, SOC 2, GDPR, CCPA, and emerging fintech regulations. Proven experience with security monitoring and detection platforms, incident response tools, vulnerability management systems, and application security solutions. Strong technical understanding of CI/CD pipelines, DevOps practices, and how they integrate with static code analysis tools, container scanning, and application security workflows. Hands‑on experience with cloud infrastructure security—particularly AWS and Kubernetes. A data‑driven mindset with strong problem‑solving abilities and excellent teamwork and time‑management skills. Bonus Skills to Stand Out Experience conducting security risk assessments and translating findings into actionable remediation plans. Hands‑on experience with security platforms such as CrowdStrike, AWS Security, GitHub Advanced Security, ZeroFox, KnowBe4, or PhishER. Industry certifications such as AWS Certified Security – Specialty, CISM, CompTIA Security+, or equivalent credentials. Work Authorization Applicants must be currently authorized to work in the location where the position is located without requiring visa sponsorship. Cloudbeds is unable to provide sponsorship for work visas. What to Expect – Your Journey with Us Behind Cloudbeds' revolutionary technology is a team redefining possibilities in hospitality. We’re 650+ employees across 40+ countries, speaking 30+ languages, united by a passion for innovation and travel. From AI breakthroughs to revolutionizing hotel operations, we’re not just watching the future of hospitality unfold – we’re building it. Learn More Visit https://cloudbeds.com. Company Awards Best All‑In‑One Hotel Management System – HotelTechAwards (2025) Overall 10 Best Places to Work – HotelTechAwards (2025) Most Loved Workplace® Certified (2024) Top 10 People’s Choice (2024) Deloitte Technology Fast 500 (2024) Benefits Remote First, Remote Always PTO in accordance with local labor requirements Two corporate apartment accommodations for team member use for free (San Diego & São Paulo) Monthly Wellness Fridays—a long weekend every month Full Paid Parental Leave Home office stipend based on country of residency Professional development courses in Cloudbeds University Access to professional development, including manager training, upskilling and knowledge transfer. Everyone is Welcome – Culture of Inclusion Cloudbeds is proud to be an Equal Opportunity Employer that celebrates the diversity in our global team We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Cloudbeds is committed to the full inclusion of all qualified individuals. Persons with disabilities are provided reasonable accommodations in the hiring process. ... (text continues, but we keep the key part up to the contact info). To all Staffing and Recruiting Agencies: Our Careers Site is only for individuals seeking a job at Cloudbeds. Seniority Level Mid‑Senior level Employment Type Full‑time Job Function Information Technology Industries Technology, Information and Internet #J-18808-Ljbffr