Cloud Security Analyst

The Cloud Security Analyst ensures the adherence of security best practices to Orion's multiple cloud platforms and validates the confidentiality, integrity, and availability of the data within those environments.
The Cloud Security Analyst will contribute to the development and implementation of internal Cloud Security requirements and provide guidance to technical teams around these developed security requirements. The Cloud Security Analyst monitors and assesses the information security controls around Orion's Cloud systems and works with technical teams to remediate any security vulnerabilities identified in a timely manner.
Essential Functions of the Job

• Continually review and assess Orion's multi-cloud environment for potential vulnerabilities. Evaluate risk, document findings, and make recommendations for remediation efforts.
• Assist with third-party application security assessments, document findings and coordinate remediation efforts where needed.
• Ensure adherence to Orion's Information Security Management System (ISMS).
• Assess Orion's multi-cloud infrastructure for adherence to security compliance standards.
• Respond to and escalate potential security incidents.
• Work closely with the DevOps, Platform, and InfoSec teams for various security tasks and initiatives.

Skills Needed to Perform the Job

• Working knowledge of threat modeling, OWASP, and software testing practices.
• Hands-on experience with infrastructure as code (IaC)
• Extensive experience in AWS to include EC2, S3, ECS, ECR, VPC, ELB, SCPs and IAM.
• Sound understanding of Cloud Security vulnerabilities, defense techniques and security best practices, including AWS-specific security practices and present-day threats.
• Knowledge of cybersecurity frameworks: ISO, NIST, SOC2.
• Experience with Cloud Security platforms: Wiz, Orca, Prisma Cloud or similar.
• Knowledge of web development frameworks.
• Strong technical writing skills to articulate security vulnerabilities to technical and nontechnical teams.
• Ability to stay abreast of emerging trends and new cloud technologies.

Education Needed to Perform the Job

• Minimum of a bachelor's degree in MIS, Computer Science, Network Technology, Cybersecurity, Application Development, Cloud Computing preferred.
• Two or more Industry certifications, or the ability to obtain within 12 months: ISC2 , CompTIA , GIAC , AWS , Azure
• Obtain Orion Industry Certification.

Experience Needed to Perform the Job

• Minimum of 5 years of experience in Information Technology, Cybersecurity, Application Development, or related field required.
• Minimum 1 year of experience with DevOps and Cloud security required.

#LI-AP1
#LI-Remote
Salary Range:
$79,498.00 - $121,703.00
The pay listed in this posting indicates the estimated pay at the time of this posting; however, may vary depending on geographic location, job-related knowledge, skills, and experience. In addition, Orion offers a competitive benefits package which includes health, dental, vision, and disability coverage on day one, 401(k) plan with employer match, paid parental leave, pet benefits including pawternity leave and pet insurance, student loan repayment and more.
About Us
As One-Orion, we accomplish our best work by being personally accountable to each other and the clients we serve. We are creating a welcoming environment where everyone is respected, valued, and heard. Our willingness to disrupt ourselves, and the industry ensures we stay ahead of client expectations. Thinking differently is in our DNA - we innovate, push boundaries, reject the status quo, and relentlessly pursue transformative outcomes. It is our collective will to win that drives Orion's success and powers success for our clients and everyone at Orion.