Cloud Security Architecture Analyst with MITRE ATT&CK and Threat Detection

Job Description: Cloud Security & Architecture Analyst

Remote

10 to 12 Years Exp

Role Summary

The Cloud Security & Architecture Analyst will be responsible for designing, documenting, and maintaining architecture blueprints that support secure, scalable, and well-governed cloud solutions. This role requires strong conceptual knowledge of cloud ecosystems-primarily AWS-and the ability to translate technical components into clear data flows, integrations, and detection logic. The ideal candidate brings deep understanding of SIEM platforms, log streaming patterns, and modern detection capabilities to ensure enterprise-grade security visibility.

Key Responsibilities

- Develop end-to-end Data Flow Diagrams (DFDs) illustrating system interactions, data movement, integrations, and control points.

- Create and maintain reference architecture blueprints mapping solution components, platforms, services, and integrations.

- Collaborate with Cloud, Security, and Engineering teams to validate architecture decisions and ensure alignment with enterprise standards.

- Document how each component fits within the broader technology stack, ensuring clarity in dependencies and operational flows.

- Support design and optimization of log pipelines, telemetry flows, and SIEM ingestion patterns.

- Maintain documentation and support knowledge transfer across engineering, security operations, and architecture teams.

Required Skills & Qualifications

- Strong conceptual understanding of AWS cloud services, cloud networking, IAM, compute, storage, logging, and security patterns.

- Experience developing clear, detailed Data Flow Diagrams (DFDs) for distributed architectures.

- Deep understanding of SIEM platforms, log ingestion pipelines, stream processing, parsers, enrichment logic, and detection rule behavior.

- Ability to map all technical components into cohesive blueprint architecture documents used by engineering and security teams.

- Strong analytical thinking and structured documentation skills.

- Excellent communication and cross-functional collaboration abilities.

Nice-to-Have Skills

- Familiarity with cloud security principles (IAM, encryption, network segmentation).

- Familiarity with MITRE ATT&CK framework

- Exposure to SOAR, EDR, or threat detection workflows.

- Experience with modeling tools like Lucidchart, Draw.io, or Visio.

- Knowledge of cloud logging tools such as AWS CloudTrail, CloudWatch, VPC Flow Logs, or event routing systems.

Why This Role Matters

This role is essential in establishing consistent, secure, and scalable reference architectures that ensure high-quality detection coverage, operational visibility, and alignment with enterprise cloud security frameworks. It supports organizational objectives in cloud modernization and cyber resilience.