Cloud Security Analyst

Cloud Security Analyst

Marathon TS is currently looking for a Cloud Security Analyst who will:

Analyze cloud services, APIs, and log payloads to ensure industry standards and security needs.

Provide development and revision from cyber leads on solutions that incorporate cloud technologies. Also provide advisement to leadership & cyber teams in current technologies to include new cloud, mobile, and desktop application work products.

Provide technical support for cybersecurity on related cloud technologies and other assignments.

Provide analysis and reporting on the cloud products currently in use to include high-risk services, data usage, and threats.

Executing cloud security controls and appropriate processes for designing security capabilities.

Collaborate with IT, Data Engineers, and Product Managers to optimize security across cloud and on-premises ecosystems.

Create technical documentation as needed.

Work closely with security team for additional security practices and support.

Required Qualifications:

Note: Presence on-site is mandatory for two days per week, either in Washington, DC, or Manassas, VA.

Bachelor's degree in a related field.

Five (5) years of experience in Information Technology, Cybersecurity, or a related field.

One (1) to two (2) years of experience implementing or supporting cloud-based cybersecurity.

Understanding and familiarity with cloud architectures (e.g., SaaS, PaaS), common commercial cloud systems (e.g., Google Workspace, Microsoft 365, AWS, Oracle), and cloud security solutions (e.g., Cloud Access Security Broker, Multi-factor Authentication, Zero Trust Architecture).

Knowledge of common cybersecurity technical controls and their application to cloud systems, such as access control, audit and accountability, configuration management, identification and authentication, system and communication protection, and system and information integrity.

Understanding of U.S. Government cybersecurity standards and methodologies including FISMA, the NIST Cybersecurity Framework, NIST 800-37 Risk Management Framework, NIST 800-53 Cybersecurity Controls, and the Federal Risk and Authorization Management Program (FedRAMP).

Knowledge of other common industry cybersecurity standards and organizational best practices.

Knowledge of current cybersecurity threats and vulnerabilities.

Understanding of basic information technology concepts, systems, and network architecture.

Proven success in contributing to a team-oriented environment.

Demonstrated experience supporting CASB/SASE solutions.

Marathon TS is committed to the development of a creative, diverse and inclusive work environment. In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Marathon TS will be based on merit, qualifications, and abilities. Marathon TS does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age or any other characteristic protected by law (referred to as "protected status"). #CJJOBS