About the job
Join our dynamic team as a Cloud Security Analyst at IGT1! We are looking for a dedicated professional with 2–3 years of substantial experience as an AWS Cloud Engineer or in Cloud Operations who is transitioning into the realm of cloud security. The ideal candidate will possess hands-on experience in AWS production environments and leverage that operational insight to identify, evaluate, and mitigate security risks utilizing state-of-the-art cloud security tools.
This position is designed for those with experience, as it is not an entry-level security role and does not involve penetration testing. The focus is on cloud security operations (SOC-style), taking ownership of findings, and spearheading remediation efforts.
Key Responsibilities
- Continuously monitor and assess the cloud security posture across AWS environments using advanced tools such as:
- Upwind (CSPM)
- AWS Security Hub
- AWS GuardDuty
- AWS Inspector
- Respond to security alerts pertaining to endpoints and workloads using SentinelOne
- Identify, evaluate, and document:
- CVEs
- IAM misconfigurations
- Cloud infrastructure security vulnerabilities
- Analyze and triage security alerts/events to determine suitable response and escalation
- Lead remediation efforts of security findings by collaborating closely with Cloud Engineering, DevOps, and Operations teams
- Utilize hands-on AWS operational knowledge to propose practical and actionable security enhancements
- Maintain thorough documentation of:
- Security findings
- Risk assessments
- Remediation strategies and outcomes
- Effectively communicate security risks, priorities, and remediation progress to technical teams and leadership
- Support adherence to internal security standards, compliance mandates, and industry best practices
- Continuously refine cloud security workflows, alerting mechanisms, and operational processes
