Cloud Cybersecurity Analyst (Onsite)

Job Title: Cloud Cybersecurity Analyst (Onsite)

Location: Columbia, SC

Duration: 12 Months

Daily Duties / Responsibilities:

The Cloud Cybersecurity Analyst will be performing monitor, detect and response capabilities in the agency cloud infrastructure. This role will work with the stakeholders to help architect, build and maintain a Secure Cloud Infrastructure by adhering to Agency policy and industry best practices. This position will report directly to the CISO to drive innovation and maturation of the Agency s Cloud Cyber threat detection and response capabilities. We are looking for candidates who are highly organized, can work independently in a fast-paced environment and produce multiple quality deliverables within defined deadlines. This role is involved in projects or issues of high complexity that requires an individual who can quickly think on their feet, challenge the status quo, and drive efficiencies through the process.

Essential Responsibilities

• Perform threat identification and analysis of risks to the Agency Cloud environments
• Conduct penetration testing and vulnerability assessments on Azure cloud infrastructure and applications.
• Provide input and feedback on cloud/hybrid architectures related to Security
• Assist in the implementation and advancement of Continuous Monitoring and Incident Response processes and procedures
• Assist in investigation and remediation of Compliance policy violations, security incidents and related issues
• Investigate and remediate compliance policy violations, security incidents, and related issues.
• Serve as a Security Point of Contact for matters related to Securing Cloud Infrastructure
• Consult on, and provide requirements for critical projects and initiatives
• Create and maintain documentation for security processes and penetration testing results.
• Revise documents and artifacts as tactics and techniques evolve to address new and emergent threats and trends
• Work with stakeholders to advance security efforts of the Agency Cloud Environments
• Raise the awareness level of cloud security in the agency
• Conduct Security Assessments to identify areas of risk and ensure gaps are remediated
• Effectively communicate to management and business stakeholders the status of projects and issues as they relate to Cloud Security
• Perform security posture assessments using Azure-native tools (Microsoft Defender for Cloud, Azure Security Center, etc.)

REQUIRED SKILLS:

• 5+ years of Cyber Threat Monitoring, Detection, Response and Incident Handling
• Knowledge of OWASP Top 10 and cloud-specific attack vectors
• Experience with vulnerability management and remediation in cloud environments
• 5+ years of experience of I.T. working with Windows, Linux, Cloud technologies or Web-based applications
• Hands-on experience with penetration testing tools (Burp Suite, Metasploit, Nmap, Kali Linux)

PREFERRED SKILLS

• 3+ years of experience with Cloud platforms (in order of preference) such as Microsoft Azure, Amazon Web Services (AWS) and/or Google Cloud Platform
• Experience with Prisma Cloud, Dome9 or similar Cloud Security capabilities
• Prior experience working with cloud security and governance tools, cloud access security brokers (CASBs), and Infrastructure as Code (IaC)
• Experience with designing and deploying an Inspection architecture in a Cloud Environment.
• Experience with full-stack deployment

SOFT SKILLS

• Ability to communicate clearly, verbally and in writing; to interact effectively with internal and external vendors, project team members, management and agency departments; to build relationships and use facilitation skills with both technical and non-technical

PREFERRED EDUCATION/CERTIFICATIONS:

• BS degree in computer science, information technology, engineering or similar discipline
• Microsoft Certified: Azure Security Engineer Associate)
• COMPTIA CLOUD +
• Network security certifications
• CISSP
• Azure Security Engineer Associate