Cloud Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop the security architecture for the AWS environment.

• Engage in all phases of design and construction in collaboration with development and infrastructure teams.

• Establish and uphold secure baselines for identity and access management, networks and firewalls, containers and Kubernetes, storage solutions, encryption, key management, and cryptographic practices.

• Create security logging and monitoring systems across all AWS accounts and workloads.

• Evaluate cloud designs and modifications, offering practical security recommendations.

• Construct guardrails and automated checks to avert insecure configurations from progressing to production.

• Collaborate with the Application Security Architect to utilize Wiz for identifying and mitigating cloud risks from development to runtime.

• Document reference architectures and secure development best practices.

• Guide and mentor engineers throughout the organization.

• Ensure new AWS services are secured from their inception.

• Maintain the AWS environment in accordance with established secure standards and address any deviations.

• Showcase infrastructure security to customers, auditors, and regulatory bodies.

⛳️ Requirements

• Generally, eight or more years of experience in security engineering or architecture.

• A minimum of five years dedicated to hands-on AWS security within multi-account environments.

• In-depth expertise in AWS IAM, AWS Organizations, service control policies, and IAM Identity Center.

• Profound understanding of AWS networking, including VPC design, security groups, AWS Network Firewall, and AWS WAF.

• Advanced knowledge of encryption technologies, including KMS, CloudHSM, and certificate management.

• Strong experience in container security with Amazon EKS or ECS, covering image security, runtime protection, and least-privilege workload identities.

• Familiarity with designing security logging systems utilizing CloudTrail, VPC Flow Logs, GuardDuty, Security Hub, and a centralized logging platform.

• Working knowledge of cryptography, including algorithm selection, key rotation, and secrets management.

• Proficiency in infrastructure as code using Terraform or CloudFormation.

• Capability to read and write code.

• Experience in securing a SaaS platform for regulated clients, preferably in the financial services sector.

• Skill in conveying complex risks in simple terms to both engineers and executives.

• Experience with Microsoft Azure or Microsoft 365 security is an advantage.

• Hands-on experience with Wiz or a comparable cloud security platform is beneficial.

• AWS Certified Security Specialty certification, or equivalent substantial experience, is a plus.

• A proactive individual with strong ownership, eagerness to learn, ambition, and a positive outlook.

• Willingness to share knowledge and enhance the effectiveness of peers.

🏝️ Benefits

• Medical/Rx insurance.

• Dental insurance.

• Vision insurance.

• Disability insurance.

• Life/AD&D insurance plans.

• Flexible Savings Account (FSA).

• Health Savings Account (HSA).

• Employee Assistance Plan (EAP).

• Health advocacy services.

• Optional ancillary plans: accident, critical illness, hospital indemnity, legal, identity theft, auto/home, and pet insurance.

• 401(k) retirement savings plan with company matching.

• Paid time off.