Information Security Analsyt Professional

Job description

Information Security Analyst Position Summary The Junior Cloud Security Analyst will support the development, implementation, and management of the company s cloud security strategies. This role focuses on a proactive approach to identifying risks within cloud environments, developing security measures, and ensuring the protection of company and customer data with a specific emphasis on cloud-native application security. - Monitor and analyze security alerts and logs (e.g., GuardDuty, CloudWatch, or SIEM) to identify potential cloud-based security incidents. - Assist in the implementation and management of cloud security tools, such as Cloud Security Posture Management (CSPM) and cloud-native firewalls. - Conduct regular cloud-specific security risk assessments and vulnerability scans. - Stay current with emerging cloud security threats, provider updates, and security technologies. - Work closely with development teams to integrate security into the cloud-native software development lifecycle (SDLC). - Assist in the design and implementation of security features for cloud applications, such as Identity and Access Management (IAM) policies and encryption solutions. - Perform application security assessments and code reviews with a focus on cloud configuration and infrastructure-as-code (IaC). - Develop and implement secure coding standards and practices specifically for cloud environments. - Ensure cloud configurations remain compliant with relevant security standards and regulations such as ISO 27001, GDPR, and SOC 2. - Assist in the development and implementation of cloud-focused incident response plans. - Respond to security incidents, conduct investigations, and coordinate with stakeholders during cloud outages or breaches. - Maintain detailed documentation of cloud security policies, procedures, and identified vulnerabilities. Qualifications Education: Bachelor s degree in Computer Science, Information Technology, or a related field. Experience: Minimum of 2+ years of experience in information security, with a focus on cloud environments. Sector: Experience in a SaaS or technology company is highly preferred. Certifications: Progress toward or completion of relevant certifications (e.g., AWS Certified Security, Google Cloud, or CCSP) is highly desirable. Skills: Technical: Strong understanding of cloud security, network security, and application security. Tools: Experience with cloud-native security tools, SIEM, and application security tools like SAST and DAST. Knowledge: Strong knowledge of cloud security frameworks (e.g., CIS Benchmarks, NIST) and best practices. Soft Skills: Strong analytical, problem-solving, and communication skills Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.