Cloud Security Analyst

Job Title

Combine technical security engineering and executive-level business consulting expertise to deliver innovative commercial Cloud strategic planning and technical solutions. Perform extensive research and analysis of RGA’s Cloud environments and delivery models, system security monitoring, tuning and alerting recommendations. Assess and document vendor vs application owner responsibilities for vulnerability scanning, remediation, and mitigation, including risk assessments and risk reporting. Maintain responsibility for analyzing and continuously monitoring Cybersecurity and privacy policies, programs, compliance artifacts, or standards for security compliance, systems authorization, and management in a commercial Cloud environment. Monitor, analyze and report on the establishment of tactics, techniques, and procedures (TTPs) for application owners.

Responsibilities

Leverage Microsoft Azure, AWS and Google Cloud Platform resources to detect, triage, remediate, and recover compromised systems across the enterprise cloud environment.

Implement best practices in cloud logging for incident response and digital forensics.

Create playbooks and document standard operating procedures for incident response on cloud platforms.

Participate in exercises to validate security profile of cloud environments, and work to improve vulnerabilities. Participate in security activities including vulnerability testing and analysis, ethical hacking, purple team assessments, and other security testing.

Mentor associates within the department on cloud technology, cloud incident response, and cloud security best practices. Provide training and guidance to team members as required.

Make recommendations on toolset modifications and improvements, improvements on development processes and production application security support.

Participate as a key member for security incident response activities.

Perform other duties as assigned.

Requirements

Education Required: Bachelor’s degree or equivalent experience.

Preferred: Master's degree and/or LOMA certification, MCSE

Required Experience

• 4+ years of relevant work experience.
• Experience in application vulnerability assessments, Testing and execution
• 4+ years of experience in Information Security (Vulnerability Management, Incident Response, install security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs).
• Experience with researching emerging technologies, including commercial, mobile, and Cloud service providers (AWS, Azure)
• Experience with Cloud Cybersecurity efforts and emerging technology aligned with NIST, SOC2 or other equivalent Frameworks.
• Outstanding communication, analytical skills and ability to function in a globally diverse work environment.
• Proficiency in performing risk, business impact, control and vulnerability assessments, and in defining treatment strategies.
• Experience in system technology security testing (vulnerability scanning and penetration testing).
• Experience in application technology security testing (white box, black box and code review).

Technical Requirements • Splunk, Sentinel or other equivalent SEIM technologies

• Azure, GCP, AWS
• Palo Alto NGFW, Prisma

Preferred experience

• 5+ years’ experience in systems and network monitoring technologies and tools
• 4 or more years’ experience in designing solutions or applications with programming technologies and tools
• Experience working with SOAR platforms is a plus.
• 6 + years of experience with public and hybrid cloud environments.
• Insurance industry knowledge

Preferred technology experience

• SANS GIAC

Company Overview

RGA Empowers Employees. It’s one thing to hire smart people, it’s another to empower them. This is one of the most important differences between RGA and its competitors. RGA empowers its employees to use their intelligence and creativity to find solutions for its customers. To be proactive in their approach to bringing value to our customers.