Senior Cloud Security Analyst
Listed on 2025-12-31
-
IT/Tech
Cybersecurity, Security Manager
Senior Cloud Security Analyst
📍 Hybrid / Remote Options (No Sponsorship Available)
đź’Ľ Full-Time | Cloud Security | IAM | O365
About the RoleWe are seeking a highly skilled Senior Cloud Security Analyst to lead the evaluation, security posture management, and continuous improvement of our multi-cloud and O365 environments. This role acts as a cross-brand consultant—connecting teams, identifying security gaps, standing up cloud environments, and guiding technical staff on required security controls and the “why” behind them.
You will assess digital and cloud security posture, outline required improvements, and partner with IT stakeholders to bring environments into compliance. This is a hands‑on position focused on Azure, AWS, GCP, IAM governance, O365 security, and cloud access controls, along with managing and enhancing vulnerability management and key security indicators.
You will work closely with senior network and security analysts in a small, highly collaborative team supporting both shoreside and distributed operational environments.
What You’ll Do Cloud Security & Posture Management- Oversee, evaluate, and continuously strengthen cloud security posture across Azure, AWS, and GCP.
- Assess current security controls, identify gaps, and develop actionable projects to remediate risks.
- Provide clear security directives such as : “Your cloud environment requires A–D; you currently only have A,” and work with teams to stand up missing controls.
- Support access and identity processes for O365, AD, Linux, and cloud‑based platforms.
- Assist with IAM operations involving SailPoint and enterprise identity workflows.
- Evaluate access levels across environments and ensure appropriate permissions and segregation‑of‑duty.
- Monitor brand security posture and provide input into SIEM integrations, identifying blind spots and validating configurations.
- Support vulnerability management initiatives, analyzing cloud findings (e.g., Orca, Qualys) and helping IT translate data into actionable remediation.
- Assist security operations with monitoring and triaging cloud security events.
- Build dashboards and reporting for executives and business leaders communicating KRIs, risks, and security posture.
- Provide training, documentation, and consulting to IT team members on cloud configurations, security best practices, and new technologies.
- Support cloud implementation and architectural reviews for upcoming solutions.
- Partner with PMO teams to build and prioritize the cybersecurity backlog.
- Recommend modern replacement technologies for legacy systems.
- Bachelor’s degree preferred (IT, Cybersecurity, Computer Science, or related).
- 5+ years of experience in cloud security and access management.
- Hands‑on expertise with :
- Azure security and administration
- AWS security controls & tenant management
- Active Directory , O365 security, Linux / Windows access admin
- SailPoint IAM
- Orca Security (preferred)
- Power Shell and scripting (Python, etc. nice to have)
- Strong understanding of IAM principles (not an IAM engineer, but fluent in IAM governance).
- Experience with GDPR, PCI, NIST frameworks.
- Ability to connect dots across teams and act as a security consultant between groups.
- Strong analytical, communication, and stakeholder management skills.
- Microsoft 365 Messaging or Security Administrator
- CompTIA Cloud+
- Cloud Security–related certs (Azure, AWS, or GCP)
- Cloud Security (Azure, AWS, GCP)
- O365 Security
- AD & Access Management
- IAM Support (SailPoint)
- Scripting (Power Shell / Python)
- Security Posture Assessment
- Vulnerability Management (Orca, Qualys)
- SIEM Integration Review
- Risk & Compliance (NIST, PCI, GDPR)
You’ll join a small, senior-level team consisting of :
- Senior Network Security Analyst
- Senior Security Analyst
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).