Security Analyst

Description

The Entry-Level Cloud Security Analyst plays a critical role in supporting the organization's information security program. This position focuses on monitoring cloud and enterprise environments for threats, investigating security alerts, and helping to maintain compliance with internal policies and regulatory requirements. The analyst contributes to ensuring the confidentiality, integrity, and availability of corporate systems and data, with an emphasis on cloud platforms like AWS.

Responsibilities

• Monitor cloud and on-prem environments for security threats using EDR, CSPM and cloud-native tools.
• Investigate security events, anomalies, and alerts, escalating as needed.
• Document findings and assist in developing incident response reports.
• Support vulnerability scanning, remediation tracking, and baseline hardening efforts.
• Assist in maintaining and improving security tools and platforms, including cloud-native security services.
• Identify opportunities to automate security processes and improve operational efficiency.
• Participate in security audits and compliance documentation.
• Collaborate with Corp IT, DevOps, CCS, and Divisional teams to strengthen security posture.
• Contribute to cloud security design reviews and assessments

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or equivalent work experience.
• 1+ year of experience in security operations, cloud security, or endpoint protection (internships and labs count).
• Familiarity with AWS services and security features (IAM, KMS, GuardDuty, Security Hub, etc.).
• Exposure to security monitoring tools such as CSPMS (Wiz, Tenable, etc) and EDR solutions.
• Basic understanding of networking concepts, OS internals (Windows/Linux), and identity management.
• Strong problem-solving and analytical skills; able to work independently and in a team.
• Knowledge of regulatory frameworks (e.g., NIST, CJIS, GovRAMP) is preferred.
• Must have/obtain and maintain one or more Cloud or Security certifications such as AWS Cloud Practitioner, CompTIA CySa+, or (ISC)2 Certified in Cybersecurity.Practitioner, CompTIA CySa+, or (ISC)2 Certified in Cybersecurity.
• Strong understanding of information security standards, concepts, controls, testing techniques and technical risk assessment .
• Strong understanding of restful API development, SDLC processes, and security automation desired