Senior Security Analyst – Cloud Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee, manage, and sustain cloud security capabilities, controls, guardrails, and platform configurations across AWS and Azure environments.

• Monitor and enhance Cloud Security Posture Management capabilities.

• Create and maintain cloud security standards, baselines, and secure configuration guidelines.

• Safeguard cloud identity and access, which includes privileged access, service accounts, roles, and secrets management.

• Assist in the onboarding of cloud accounts, subscriptions, and workloads.

• Assess cloud security technologies and aid in the integration and optimization of security tools.

• Develop automation solutions utilizing APIs, scripting, and cloud-native tools.

• Build and improve cloud monitoring, alerting, and detection capabilities, including cloud telemetry within SIEM and security monitoring systems.

• Investigate cloud security alerts, suspicious activities, and potential threats.

• Address cloud-related security incidents, supporting containment, remediation, and post-incident evaluations.

• Create and uphold cloud-focused incident response protocols and playbooks.

• Review and resolve security-related tickets, alerts, requests, and escalations.

• Engage in the Infrastructure Security on-call rotation.

• Take part in security architecture assessments and evaluate cloud designs.

• Collaborate with architecture, infrastructure, platform, application development, and technology operations teams to implement secure-by-design practices.

• Assist in audit, compliance, and regulatory initiatives by providing cloud control evidence and mapping controls to NIST CSF, SOC 2, and PCI DSS.

• Collaborate with Vulnerability Management on patching, configuration hardening, and remediation efforts.

• Work alongside Infrastructure Security team members, including those focused on Endpoint Security, Vulnerability Management, and AI Security.

• Act as a cloud security subject matter expert through mentoring, knowledge sharing, and the documentation of standards.

⛳️ Requirements

• A minimum of 5 years of experience in cybersecurity, cloud security, systems engineering, or a related field.

• Practical experience securing AWS environments.

• Familiarity with Microsoft Azure security services and controls.

• Strong knowledge of cloud identity and access management principles.

• Experience with CSPM, SIEM, EDR/XDR, or comparable security technologies.

• Background in investigating security events and supporting incident response efforts.

• Understanding of cloud networking, logging, monitoring, encryption, and secrets management concepts.

• Experience collaborating with infrastructure, architecture, platform, and application engineering teams.

• Capability to translate cloud security risks into actionable technical controls and remediation guidance.

• Excellent written and verbal communication skills.

• Willingness to work onsite at one of the employer's offices during the initial week of employment.

• Availability for occasional weekend and after-hours on-call responsibilities.

• Certifications such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), CCSP, AWS Certified Solutions Architect, CISSP, or equivalent.

• Experience with platforms like CrowdStrike Falcon, Falcon Cloud Security, Microsoft Defender for Cloud, or similar tools.

• Familiarity with Infrastructure as Code technologies such as Terraform.

• Experience in securing containerized and serverless workloads, including Kubernetes (EKS/AKS), container image scanning, and runtime protection.

• Proficiency in Python, PowerShell, APIs, or other security automation techniques.

• Experience in developing cloud detections, security analytics, or monitoring use cases.

• Background in financial services, insurance, or other regulated industries.

🏝️ Benefits

• Opportunities for professional and personal growth through on-the-job training and professional development.

• A supportive, caring, and transparent workplace culture.

• Community support and recognition of achievements.

• Consideration of equity in compensation.