Cloud Security Analyst

Mondelēz International

10d•$109,000 - $149,875

About The Position

The Cloud Security Analyst is responsible for ensuring the security, compliance, and operational integrity of enterprise workloads across cloud environments, including mostly AWS, Azure, and Google Cloud Platform. This role provides hands-on security expertise, drives cloud governance maturity, and partners closely with engineering, operations, and compliance teams to reduce risk and strengthen the organization’s multi-cloud security posture.

Requirements

5+ years of experience in cloud security or cloud engineering.
Hands-on experience securing AWS, Azure, and GCP.
Strong understanding of IAM, network security, encryption, and cloud shared responsibility models.
Experience with CSPM tools, such as Wiz and Falcon Cloud Security.
Solid understanding of IaC concepts.
Familiarity with SIEM/SOAR and compliance frameworks.

Responsibilities

Cloud Security Posture Management (CSPM)
Monitor and manage security posture across AWS, Azure, and GCP using CSPM tools such as Wiz and Falcon Cloud Security.
Identify misconfigurations, vulnerabilities, and high-risk assets
Track and document remediation efforts.
Develop dashboards, metrics, and reporting for cloud compliance and risk reduction.
Identity, Access & Entitlement Security
Review and enforce least-privilege access across cloud and hybrid environments.
Maintain identity guardrails (SSO, MFA, conditional access).
Conduct periodic access reviews and support privileged access governance.
Cloud Security Engineering
Partner with engineering teams to design secure architectures following NIST, CIS, and company standards.
Validate Infrastructure-as-Code for compliance.
Support deployment and maintenance of cloud-native security controls.
Threat Detection & Incident Response
Analyze cloud alerts and support cloud-focused incident response.
Coordinate with SOC teams to refine monitoring rules.
Governance, Risk & Compliance
Contribute to cloud security policies, standards, and baselines.
Perform compliance reviews for CIS, NIST, ISO 27001.
Support audits and evidence gathering.
DevSecOps & Automation
Work with DevOps teams to embed security into CI/CD pipelines.
Implement automated security checks.
Create scripts to automate security tasks.
Collaboration & Stakeholder Engagement
Serve as a trusted partner to cloud engineering, network, application, and GRC teams.
Provide secure design guidance and threat modeling support.
Communicate risks clearly to technical and executive stakeholders.