Information Security Analyst

Job Title

Responsibilities:

Provide vulnerability management and secure configuration baseline management oversight and governance programs.

Adjudicate risk-acceptance ("exception") requests and false positive requests, review metrics, shape and govern based on trends being presented

Qualifications:

Looking for strong AWS Cloud and security experience

MUST have Vulnerability Management in cloud resources experience

Experience with Security Assurance, Cloud Security Engineering, or DevSecOps

Working knowledge of security risk oversight, CVSS (Common Vulnerability Scoring System), CVE (Common Vulnerabilities and Exposures), and technical security vulnerability remediation/mitigation

Practical experience analyzing cloud infrastructure vulnerability data to understand and communicate risks, concerns and outcomes of decisions

Extensive experience working with AWS EC2s (or Azure VMs), as well as Container (Kubernetes / EKS) and image security scanning

Preferred knowledge of cloud infrastructure hardening – such as validating EC2 Operating Systems against CIS benchmarks, or detecting security misconfigurations with EKS deployments

Security Certifications preferred

Required Skills: Cloud, Network Security. Additional Skills: Security Engineer, Network Engineer. This is a high PRIORITY requisition.