Cloud Information Security Analyst/Remote

Job Title: Cloud Information Security Analyst

Location: Remote

Experience: 3–7 years

Role Overview

We are looking for a Cloud Information Security Analyst to protect and secure cloud-based infrastructure, applications, and data across platforms like Microsoft Azure, Amazon Web Services, or Google Cloud Platform. The role focuses on identifying risks, implementing security controls, and ensuring compliance in cloud environments.

Key Responsibilities

• Monitor and analyze cloud environments for security threats and vulnerabilities
• Implement and manage security controls across cloud platforms
• Conduct risk assessments, vulnerability scans, and penetration testing coordination
• Ensure compliance with security standards (ISO 27001, SOC 2, etc.)
• Manage identity and access controls (IAM, RBAC, MFA)
• Investigate and respond to security incidents and breaches
• Work with DevOps and engineering teams to embed security best practices (DevSecOps)
• Configure and monitor security tools (SIEM, DLP, endpoint protection)
• Maintain security documentation, policies, and procedures

Required Skills & Qualifications

• Hands-on experience with at least one cloud platform (Microsoft Azure, Amazon Web Services, or Google Cloud Platform)
• Strong understanding of cloud security principles and best practices
• Experience with identity and access management (IAM)
• Familiarity with security tools (SIEM, vulnerability scanners, firewalls)
• Knowledge of networking concepts, encryption, and secure protocols
• Experience with incident response and threat analysis
• Understanding of compliance frameworks (ISO 27001, NIST, CIS benchmarks)

Preferred Qualifications

• Certifications such as CEH, CISSP, CCSP, or cloud security certifications
• Experience with container and Kubernetes security
• Familiarity with Infrastructure as Code (Terraform, ARM, etc.)
• Exposure to DevSecOps practices and automation

Soft Skills

• Strong analytical and problem-solving skills
• Attention to detail and risk awareness
• Effective communication and reporting skills

Nice to Have

• Experience with zero-trust architecture
• Knowledge of threat intelligence and security automation (SOAR)
• Experience in multi-cloud or hybrid cloud environments