Description
We are looking for a Senior Cloud Security Analyst (Analyst II) to administer and enhance the security posture of enterprise cloud environments hosting regulated healthcare data.
This role is responsible for managing cloud security platforms, configuring security guardrails, driving cloud governance activities, and improving security automation and reporting.
You will work closely with cloud, engineering, DevOps, and security teams to strengthen cloud security controls, ensure compliance, and support the adoption of enterprise cloud security standards.
Major Responsibilities:
- Administer and maintain cloud security platforms, policies, integrations, and security controls.
- Configure cloud governance guardrails, compliance controls, and security policies.
- Build and maintain cloud security dashboards, reports, and security metrics.
- Develop and manage automation workflows for security findings and remediation tracking.
- Lead cloud IAM governance reviews and identify excessive privilege or access risks.
- Prioritize and track cloud security risks, vulnerabilities, and remediation activities.
- Investigate and support complex cloud security incidents and escalations.
- Oversee vulnerability management and container security governance activities.
- Conduct cloud security posture reviews and compliance assessments.
- Support audit readiness activities and cloud compliance evidence collection.
- Partner with engineering and cloud teams to improve cloud security controls and standards.
- Contribute to cloud security architecture reviews and cloud security strategy initiatives.
- Provide guidance and support to junior Cloud Security Analysts.
Experience Requirement:
- Bachelor's degree in Computer Science, Information Technology, Information Systems, Cybersecurity, or a related field.
- 3-5 years of experience in cloud security, cloud engineering, security operations, or a related technical role.
- Minimum 2 years of hands-on experience securing and managing AWS environments.
- Experience administering cloud security platforms such as CSPM or CNAPP solutions.
- Strong knowledge of AWS security services, IAM, networking, encryption, logging, and cloud security best practices.
- Experience managing cloud security policies, guardrails, governance controls, and compliance requirements.
- Knowledge of cloud IAM, least-privilege access models, policy analysis, and privilege escalation risks.
- Experience with cloud vulnerability management, remediation tracking, and risk prioritization.
- Ability to create dashboards, metrics, and reports for technical and leadership audiences.
- Hands-on scripting experience using Python or Bash.
- Familiarity with Infrastructure as Code tools such as Terraform or CloudFormation.
- Strong analytical, troubleshooting, communication, and stakeholder management skills.
Good to Have:
- AWS Certified Security – Specialty, AWS Certified Solutions Architect – Associate, or equivalent certifications.
- Experience with Wiz, Prisma Cloud, Lacework, Defender for Cloud, or similar CNAPP/CSPM platforms.
- Experience implementing security automation and workflow orchestration.
- Exposure to Microsoft Azure and/or Google Cloud Platform.
- Experience working within healthcare, healthcare technology, or other regulated industries.
- Knowledge of CIS Benchmarks, SOC 2, HITRUST, HIPAA, and cloud compliance frameworks.
- Experience supporting cloud security architecture reviews and cloud migration projects.
- Experience mentoring junior analysts and leading governance activities.