Information Security Analyst / Senior Information Security AnalystFocus: Cloud Security - Google Cloud Platform & AzureLocation: Philadelphia, PA
Schedule: Hybrid - Tuesday, Wednesday, Thursday onsite; Monday and Friday remote
Eligibility: Must reside and work within PA, NJ, or DE
Position OverviewWe are seeking a collaborative, hands-on Information Security Analyst / Senior Information Security Analyst with strong cloud security expertise, particularly across Google Cloud Platform (Google Cloud Platform) and Microsoft Azure.
This individual will join a six-person security team responsible for protecting enterprise cloud infrastructure, strengthening security governance, assessing vulnerabilities, and advising technical teams on security best practices. The ideal candidate will serve as a cloud security subject matter expert (SME), helping identify security risks, recommend remediation strategies, and improve security posture across the organization.
This is a highly collaborative role requiring someone who can work independently, participate in cloud project discussions, conduct security assessments, and partner with infrastructure and engineering teams to resolve security concerns.
Candidates at both the Analyst and Senior Analyst levels will be considered, with experience and compensation aligned accordingly.
Key ResponsibilitiesCloud Security & Posture Management- Serve as a security SME for Google Cloud Platform and Azure environments, with particular emphasis on Google Cloud Platform security.
- Assess cloud configurations, identify vulnerabilities, and recommend improvements to strengthen enterprise security posture.
- Utilize Google Security Command Center, Microsoft Defender for Cloud, and Cloud Security Posture Management (CSPM) solutions.
- Support the evaluation and migration to a new CSPM platform.
- Conduct cloud security assessments, review Secure Score reports, and track remediation initiatives.
- Participate in Google Cloud Platform project meetings, advising engineering and business teams on security requirements, architecture, and best practices.
Identity, Access & Enterprise Security- Support identity and access management (IAM) across cloud and enterprise environments.
- Work with Microsoft Entra ID, Okta, identity providers (IdP), MFA, and access management controls.
- Evaluate cloud access permissions, security configurations, and identity-related risks.
- Support Microsoft security initiatives, including migration from Proofpoint to Microsoft Defender for Office 365.
- Utilize enterprise security tools such as Qualys, Microsoft Defender, and cloud-native security platforms.
Security Assessments, Governance & Compliance- Perform security risk assessments, identify control gaps, and recommend appropriate remediation.
- Strengthen security governance, policies, procedures, and operational controls.
- Support compliance initiatives aligned with HITRUST, HIPAA, SOC 2, and NIST security frameworks.
- Collaborate with infrastructure, cloud engineering, and application teams to prioritize and remediate security findings.
- Develop security documentation, technical procedures, and operational playbooks for internal teams and third-party partners.
Collaboration & Continuous Improvement- Act as a trusted security advisor to cloud engineering, infrastructure, and business stakeholders.
- Work closely with a six-person security team whose members specialize in different cloud and security disciplines.
- Independently investigate security concerns and provide technical recommendations while partnering with other teams on remediation.
- Support security technology enhancements, cloud security initiatives, and continuous improvement efforts.
- Communicate security findings, risks, and recommendations to both technical and nontechnical audiences.
Required Qualifications- Relevant experience in information security, cloud security, or enterprise security operations, with senior-level candidates expected to demonstrate greater technical ownership and expertise.
- Hands-on experience securing Google Cloud Platform and/or Microsoft Azure cloud environments, with strong Google Cloud Platform expertise highly desirable.
- Experience with cloud security assessments, vulnerability management, and security posture improvement.
- Working knowledge of Google Security Command Center, Microsoft Defender for Cloud, or comparable CSPM solutions.
- Understanding of identity and access management, including Microsoft Entra ID, Okta, and cloud IAM.
- Familiarity with security governance, risk assessments, and compliance frameworks such as HITRUST, HIPAA, SOC 2, and NIST.
- Ability to assess security issues, recommend solutions, and collaborate with technical teams to implement remediation.
- Strong technical documentation, communication, and stakeholder management skills.
Preferred Qualifications- Experience implementing, migrating, or administering Cloud Security Posture Management (CSPM) platforms.
- Strong hands-on experience with Google Security Command Center and Microsoft Defender for Cloud.
- Experience developing security playbooks, technical procedures, and third-party security documentation.
- Experience with Microsoft security technologies, including Defender for Office 365, Entra ID, and Secure Score reporting.
- Experience with Qualys, Proofpoint, and enterprise vulnerability management tools.
- Background supporting cloud migrations, security architecture reviews, and governance improvements.
- Certifications such as CCSP, Microsoft AZ-500, Google Professional Cloud Security Engineer, or comparable cloud security credentials.
Work EnvironmentThis role is part of a collaborative six-person information security team supporting a predominantly Microsoft-based enterprise environment with significant Google Cloud Platform and Azure security responsibilities. AWS exposure is beneficial but is not a primary focus as the organization is reducing its AWS footprint.
The successful candidate will bring strong technical expertise, independent problem-solving capabilities, and the ability to work effectively across security, infrastructure, cloud engineering, and business teams.
