Cloud Security Analyst

BCMC•Arlington, VA

4d•Onsite

About The Position

BCMC is supporting a U.S. Government customer to provide support for onsite incident response to civilian Government agencies and critical asset owners who experience cyber-attacks, providing immediate investigation and resolution. Contract personnel perform investigations to characterize the severity of breaches, develop mitigation plans, and assist with the restoration of services. We are seeking a Cloud Security Analyst to support this critical customer mission. The Cloud Security Analyst will assess, monitor, and secure cloud-based technology integration initiatives, ensuring cloud deployments meet security requirements while supporting pilot activities and production integrations. This role focuses on cloud security posture management, compliance validation, and risk mitigation for cloud-enabled capabilities.

Requirements

U.S. Citizenship
Active TS/SCI clearance
Ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability
6+ years of experience in cloud security or security analysis
Strong knowledge of AWS, Azure, or GCP security services
Experience with cloud security assessment and monitoring tools
Understanding of federal cloud security requirements (FedRAMP, NIST)
Knowledge of cloud security frameworks and best practices
Experience with security monitoring and SIEM platforms
Strong analytical and problem-solving skills
Experience with cloud compliance and governance
Strong analytical and problem-solving skills
Excellent documentation and communication abilities

Nice To Haves

Experience supporting federal cybersecurity programs
Background in malware analysis or threat hunting in cloud environments
Experience with container security (Docker, Kubernetes)
Knowledge of AI/ML security considerations
Experience with infrastructure-as-code security scanning
Familiarity with cloud security posture management (CSPM) tools
Understanding of multi-cloud and hybrid security architectures

Responsibilities

Assess security of cloud-based technology integration pilots
Monitor cloud security posture for integrated capabilities
Conduct security reviews of cloud architectures and configurations
Ensure cloud deployments comply with federal security requirements
Implement cloud security controls and monitoring solutions
Support local LLM development and deployment security within controlled boundaries
Assess cloud integration risks and recommend mitigations
Monitor cloud environments for security events and anomalies
Conduct security validation testing for cloud-based pilots
Support transition of cloud pilots into production environments
Document cloud security controls and compliance evidence
Coordinate with cloud service providers on security requirements
Support continuous monitoring and security automation in cloud environments
Ensure cloud integrations align with Zero Trust principles
Provide cloud security guidance to development and operations teams