Cloud Security Analyst
About The Position
The Cloud Security Analyst is part of the Information Security & Compliance team and helps configure, monitor, and protect the organization’s cloud SaaS platforms, including Salesforce, ServiceNow, Microsoft 365, and other business applications. The role directly owns data security for some SaaS platforms and partners with platform owners across others. It focuses on hands-on security configuration, monitoring, investigation, threat response, and remediation, while expanding coverage to additional platforms as organizational needs change. The analyst is expected to independently resolve routine and moderately complex security issues, investigate meaningfully before escalating, and steadily develop expertise in the assigned platforms. Deeper security architecture, infrastructure, and application engineering remain the responsibility of relevant subject-matter experts and platform owners, with whom this role partners. The position also supports access reviews, audits, and compliance activities, and improves security operations through automation, documentation, and repeatable processes.
Requirements
- Experience in information security, security operations, cloud security, identity and access management, systems administration, or a related technical discipline.
- Hands-on experience administering or securing at least one major SaaS platform, such as Salesforce, ServiceNow, or Microsoft 365.
- Understanding of least privilege, identity federation (SAML, OAuth, OIDC), MFA, encryption, data classification, and logging.
- Ability to read and interpret audit logs, sign-in events, security alerts, and technical documentation.
- Strong troubleshooting and analytical problem-solving skills, including methodically working through unfamiliar security problems.
- Familiarity with scripting or query languages such as PowerShell, Python, KQL, or SOQL, and ability to automate repeatable security tasks.
- Experience triaging security alerts and investigating suspicious activity through to resolution.
- Ability to distinguish routine security events from incidents requiring escalation or broader response.
- Ownership mindset: investigate before escalating, document findings, and seek ways to prevent recurring issues.
- Ability to improve security posture through automation, better detections, tooling, documentation, or process improvements.
- Ability to make practical security improvements that balance risk reduction with business usability without over-engineering.
- Interest in improving supportability and reducing dependence on tribal knowledge or a single subject-matter expert.
- Ability to explain security risks and recommendations clearly to technical and non-technical audiences.
- Ability to document security standards, procedures, and investigation steps so others can follow them.
- Comfort collaborating across IT, application administration, infrastructure, compliance, legal, and business teams.
Nice To Haves
- Experience with Microsoft security products, including Entra ID, Defender for Cloud Apps, Defender XDR, Purview, and Sentinel.
- Experience with Salesforce Shield, including Event Monitoring, Platform Encryption, Field Audit Trail, and Salesforce security configuration.
- Experience with ServiceNow security administration, access control lists (ACLs), and instance hardening.
- Experience with SaaS Security Posture Management (SSPM) or Cloud Access Security Broker (CASB) tools.
- Experience with SIEM or SOAR platforms, log ingestion, and detection engineering.
- Experience with identity platforms such as Okta or Entra ID, including SSO and lifecycle management.
- Familiarity with NIST CSF, CIS Benchmarks, MITRE ATT&CK, SOC 2, or ISO 27001.
- Security certifications such as Security+, CySA+, CCSP, Microsoft SC-200 / SC-300 / SC-401, or Salesforce Security and Administrator credentials.
Responsibilities
- Own data security across some cloud SaaS platforms and partner with platform owners to apply best practices across the corporate platform environment.
- Configure, harden, and maintain data security settings across cloud SaaS platforms and business applications.
- Manage and review identity and access controls, including SSO, MFA, conditional access, role and permission models, sharing settings, and privileged accounts.
- Implement and maintain data protection controls such as DLP, sensitivity labels, encryption settings, field-level security, and external sharing policies.
- Build, tune, and maintain SaaS monitoring, logging, and event detection, including audit log collection, alert rules, and integrations with SIEM and security tools.
- Triage and investigate security alerts and suspicious activity, including anomalous logins, data exfiltration, risky OAuth or third-party app connections, and unauthorized configuration changes.
- Hunt for threats, misconfigurations, and security posture drift using SSPM, CASB, native security consoles, and other tools.
- Lead remediation of identified threats and vulnerabilities, coordinating with platform owners, administrators, and IT teams through resolution.
- Participate in SaaS-related incident response, including containment, evidence collection, root-cause analysis, and follow-up.
- Identify repetitive manual work and create or improve scripts, automated detections, dashboards, playbooks, and workflows.
- Create and maintain security baselines, configuration standards, runbooks, and procedures.
- Support access reviews, audits, and compliance activities, including SOC 2, ISO 27001, and privacy requirements, for assigned SaaS platforms.
- Review new SaaS applications, integrations, and significant configuration changes for security risk and advise on secure implementation.
- Learn additional SaaS platforms as organizational needs change and applications are introduced, modernized, replaced, or retired.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Education Level
No Education Listed
