cloud security analyst

Alignerr

<div>
 <strong>
  AI / Emerging Tech Security Analyst (AI Training)
  <br/>
  <br/>
 </strong>
 <strong>
  About The Role
  <br/>
  <br/>
 </strong>
 What if your security expertise could directly shape how the world's most powerful AI systems defend themselves against attack? We're looking for AI Security Analysts to probe, stress-test, and evaluate frontier AI models &mdash; identifying how they can be manipulated, misused, or pushed beyond their intended boundaries before those vulnerabilities cause real-world harm.
 <br/>
 <br/>
 This is a fully remote, flexible contract role for security professionals who are curious about AI and want to work at the cutting edge of both fields. If you think in threat models, love finding what breaks, and want your work to matter &mdash; this is the role for you.
 <br/>
 <br/>
 <ul>
  <li>
   Organization: Alignerr
  </li>
  <li>
   Type: Hourly Contract
  </li>
  <li>
   Location: Remote
  </li>
  <li>
   Commitment: 10&ndash;40 hours/week
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What You'll Do
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Analyze AI and LLM security scenarios to understand how models behave under adversarial or unexpected conditions
  </li>
  <li>
   Review and evaluate cases involving prompt injection, data leakage, model abuse, and system misuse
  </li>
  <li>
   Classify security vulnerabilities and recommend appropriate mitigations based on real-world impact and likelihood
  </li>
  <li>
   Apply threat modeling frameworks to emerging AI technologies and deployment contexts
  </li>
  <li>
   Help evaluate and improve AI system behavior so it remains safe, reliable, and aligned with security best practices
  </li>
  <li>
   Work independently and asynchronously on task-based assignments at your own pace
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Who You Are
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Background in cybersecurity, information security, or a closely related field
  </li>
  <li>
   Strong understanding of security threat modeling applied to modern software systems
  </li>
  <li>
   Genuinely curious about how AI systems are built, deployed, and potentially exploited
  </li>
  <li>
   Analytical and precise &mdash; you approach complex systems methodically and don't miss edge cases
  </li>
  <li>
   Clear written communicator who can document findings and reasoning with structure and confidence
  </li>
  <li>
   Self-motivated and reliable when working independently without supervision
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Nice to Have
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Hands-on experience with penetration testing, red teaming, or vulnerability research
  </li>
  <li>
   Familiarity with large language models (LLMs), AI APIs, or prompt engineering concepts
  </li>
  <li>
   Background in application security, cloud security, or API security
  </li>
  <li>
   Experience with adversarial machine learning or AI safety concepts
  </li>
  <li>
   Certifications such as OSCP, CEH, CISSP, or equivalent practical experience
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Why Join Us
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Work directly on frontier AI systems alongside the world's leading AI research labs
  </li>
  <li>
   Fully remote and flexible &mdash; work when and where it suits you
  </li>
  <li>
   Freelance autonomy with the structure of meaningful, high-stakes work
  </li>
  <li>
   Be at the forefront of an entirely new discipline &mdash; AI security is one of the most important emerging fields in tech
  </li>
  <li>
   Potential for ongoing work and contract extension as new projects launch
  </li>
 </ul>
</div>


AI / Emerging Tech Security Analyst

Apex Technology

<div><p>Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge.</p><p>
For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles.</p><p>
Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more.</p><p>
We&rsquo;d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.</p><p></p><h1 class="jobSectionHeader"><b>
About the Role</b></h1><p>
We are seeking a Cloud Security Engineer to design, implement, maintain, and optimize secure cloud environments supporting U.S. government, DoD, and intelligence community missions.<br>
<br>
This role plays a critical part in protecting classified and sensitive data in AWS, Azure, and hybrid/multi-cloud infrastructures while ensuring full compliance with federal standards such as NIST 800-53, FedRAMP, RMF, and DoD Impact Levels (IL-4/IL-5).
<br>
<br>
<b>The candidate must hold an active Secret clearance (TS/SCI preferred)</b> and bring hands-on experience securing cloud platforms in regulated environments. This role will help the organization meet industry standards such as SOC2, ISO 27001, PCI-DSS, GDPR/CCPA, or other relevant compliance frameworks.</p><p></p><h1 class="jobSectionHeader"><b>
Responsibilities:
</b></h1><ul><li><p>Design and implement secure cloud architectures and configurations across AWS GovCloud, Azure, and/or Google Cloud, applying best practices for least privilege encryption, network segmentation, and data protection.</p></li><li><p>
Implement and maintain cloud security frameworks, ensuring ongoing compliance with NIST 800-53 Rev. 5, FedRAMP, DoD IL-2/4/5, RMF, and Secure Cloud Computing Architecture (SCCA) requirements.</p></li><li><p>
Configure and manage Identity and Access Management (IAM), Role-Based Access Control (RBAC), Just-In-Time (JIT) access, Key Vaults, and Zero Trust Architecture (ZTA) principles across cloud environments.
</p></li><li><p>Engineer, deploy, and optimize cloud-native security tools, including Microsoft Defender for Cloud, Azure Sentinel, AWS GovCloud security services, CSPM/CWPP solutions, and SIEM (Elastic) platforms for threat detection, monitoring, and response.</p></li><li><p>
Conduct vulnerability assessments, penetration testing simulations, security configuration reviews (against STIGs, CIS benchmarks, and NIST controls), and continuous<br>
monitoring of cloud resources.</p></li><li><p>
Develop, maintain, and update System Security Plans (SSP), Security Assessment Reports (SAR), Plans of Action &amp; Milestones (POA&amp;M), and risk/compliance reporting for cloud-based operations.</p></li><li><p>
Identify, analyze, and respond to Indicators of Compromise (IoCs), threat intelligence, and security incidents within cloud environments; perform root-cause analysis and implement preventive controls.
</p></li><li><p>Perform periodic security reviews and audits of cloud environments (Azure, AWS, hybrid) to ensure sustained compliance, mitigate evolving threats, and update policies/procedures.</p></li><li><p>
Collaborate with DevSecOps, infrastructure, and development teams to integrate security into CI/CD pipelines, automate security controls, and support secure cloud migrations or<br>
modernization initiatives.</p></li><li><p>
Assess current cloud architectures, propose security improvements, review designs through a security lens, and serve as a subject-matter expert on cloud security tools,<br>
processes, and best practices.</p></li><li><p>
Coordinate with configuration management teams to ensure hardware/software changes adhere to security protocols, maintain version control, and support documentation of the cyber terrain.</p></li><li><p>
Develop, enforce, and maintain cloud security policies, standards, and automated guardrails to support secure CI/CD pipelines and infrastructure-as-code (IaC) practices (e.g., using Terraform, CloudFormation).</p></li><li><p>
Monitor cloud environments for security incidents, investigate alerts, perform root-cause analysis, and coordinate incident response activities.
</p></li><li><p>Identify emerging threats and recommend proactive improvements to cloud security posture, including automation of security controls and processes.</p></li><li><p>
Provide guidance and training to engineering teams on secure cloud design patterns and best practices.</p></li><li><p>
Ability to be on-site 5 days a week at our office Playa Vista.
</p></li></ul><h1 class="jobSectionHeader"><b>Requirements:</b></h1><ul><li><p>
Security Clearance: Active U.S. Secret clearance required (TS/SCI)</p></li><li><p>
Must be a U.S. citizen.</p></li><li><p>
Education: Bachelor&rsquo;s degree in Cybersecurity, Information Assurance, Computer Science, or a related field (or 5+ years equivalent professional experience in cloud security engineering)</p></li><li><p>
Experience: 5&ndash;9+ years in cloud security engineering, with hands-on work in AWS GovCloud, Azure, Google GCP, or multi-cloud environments.
</p></li><li><p>Strong analytical, problem-solving, communication, and collaboration skills; ability to work in fast-paced, mission-critical environments.<br>
<br>
</p><h1 class="jobSectionHeader"><b>Technical Skills:</b></h1><ul><li><p>
Deep knowledge of cloud platforms (AWS GovCloud, Azure Government, etc.), IAM/RBAC, encryption, network security, and cloud-native security services.</p></li><li><p>
Familiarity with SIEM, vulnerability scanners, threat intelligence, and automation tools (e.g., Terraform, Python scripting).</p></li><li><p>
Experience with compliance frameworks (NIST, FedRAMP, RMF) and tools like Azure Sentinel, NESSUS, BURP SUITE, Microsoft Defender, or AWS equivalents.</p></li><li><p>
Deep understanding of network security, encryption, logging/monitoring, and container/Kubernetes security.</p></li><li><p>
Experience with infrastructure-as-code, scripting (Python, PowerShell, etc.), and security automation tools.</p></li></ul></li><li><p><b>
Additional Certifications:
</b></p><ul><li><p>CISSP, AWS Certified Security-Specialty, AWS Certified Solutions Architect (Associate or Professional), Microsoft Certified: Security, Compliance &amp; Identity, Security+, CEH, or CSSP related (e.g., CySA+, GCIH).</p></li></ul></li></ul><h1 class="jobSectionHeader"><b>
Why Join Apex?</b></h1><p>
Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We're a fast-growing startup backed by $200M in Series D funding, and we invest heavily in our people from day one.</p><p></p><h2 class="jobSectionHeader"><b>
What We Offer For Full-time Employees:</b></h2><ul><li><p><b>
Shared upside:</b> Receive equity in Apex, letting you benefit from the work you create</p></li><li><p><b>
Best-in-class healthcare:</b> 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost</p></li><li><p><b>
Comprehensive PTO package</b> to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays</p></li><li><p><b>
Competitive 401(k) plan</b> with generous matching - 100% match on first 3%, 50% on next 2%</p></li><li><p><b>
8 weeks paid parental leave</b> plus childcare reimbursement up to $350/day for work-related travel</p></li><li><p><b>
Daily catered lunch and unlimited snacks</b> to keep you fueled throughout the day</p></li><li><p><b>
Vibrant community:</b> Monthly office BBQs, pickleball tournaments, run club, and social gatherings for you and your family</p></li><li><p><b>
Your dream desk setup</b> and all the tools you need to be your most productive self</p></li><li><p><b>
World-class Playa Vista office</b> with EV chargers, with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life</p></li><li><p><b>
Real impact opportunity:</b> Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference</p></li></ul><p><i>
Ready to join a team where your contributions matter and your future is bright? Let's build something extraordinary together.</i></p><p></p><h1 class="jobSectionHeader"><b>
Equal Opportunity Employer</b></h1><p>
Apex Technology, Inc. is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Candidates and employees are always evaluated based on merit, qualifications, and performance. We will never discriminate on the basis of race, color, gender, national origin, ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status.</p><p></p><p>
Compensation Range: $120K - $170K</p></div>

Cloud Security Engineer

Openkyber

<div><b>job summary:</b>
<p>Overview We are seeking a Cloud Security Engineer to join our cybersecurity team. This role is responsible for helping secure enterprise cloud environments across Azure, AWS, Google Cloud Platform (Google Cloud Platform), and Oracle Cloud Infrastructure (OCI). The ideal candidate will work closely with cloud engineering, application, and network teams to identify security risks, improve cloud security controls, and support the organization's overall cloud security strategy.</p>
<b>Key Responsibilities</b>
<ul><li>Support the security of cloud environments across multiple cloud providers.</li>
<li>Help manage and operate Cloud Security Posture Management (CSPM) tooling to identify and remediate security risks.</li>
<li>Review cloud configurations and architectures to ensure security best practices are followed.</li>
<li>Work with engineering teams to address security findings and reduce risk.</li>
<li>Support security for cloud-hosted applications, platforms, and container environments.</li>
<li>Assist with securing container platforms and orchestration technologies.</li>
<li>Support cloud network security and secure access solutions, including SASE-related controls.</li>
<li>Investigate cloud security alerts and incidents and coordinate remediation efforts.</li>
<li>Contribute to the development and maintenance of cloud security standards and policies.</li>
<li>Assist with security reviews for AI and emerging cloud technologies.</li>
<li>Help automate security processes and improve visibility across cloud environments.</li>
</ul><b>Required Skills &amp; Qualifications</b>
<ul><li>Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent work experience).</li>
<li>5+ years of experience in cybersecurity, with a focus on cloud security or cloud platforms.</li>
<li>Experience working with one or more major cloud providers (Azure, AWS, Google Cloud Platform, or Oracle Cloud).</li>
<li>Familiarity with cloud security tools, including CSPM solutions.</li>
<li>General understanding of cloud identity, networking, and security best practices.</li>
<li>Experience supporting application, container, or platform security in cloud environments.</li>
<li>Experience participating in security investigations or incident response activities.</li>
<li>Strong problem-solving skills and the ability to work across teams.</li>
<li>Clear written and verbal communication skills.</li>
</ul><b>Preferred Qualifications</b>
<ul><li>Experience supporting multi-cloud environments.</li>
<li>Familiarity with container platforms and cloud-native architectures.</li>
<li>Experience using SIEM tools such as Splunk.</li>
<li>Interest or experience in securing AI or emerging cloud technologies.</li>
</ul><p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

Junior Cloud Engineer

Tata Consultancy Services (TCS)

<div></div><div><div><div><div><ul><li>Managing and protecting an organization's Microsoft 365 environment from email and collaboration-based threats through the configuration and monitoring of the Microsoft Defender for Office 365 service. Responsibilities include threat detection, incident response, policy management, and technical support to safeguard against phishing, malware, and other advanced attacks</li>
<li>Defender for Cloud Apps role requires a candidate to manage, monitor, and protect cloud applications from threats, with responsibilities including discovering apps, managing their security posture, implementing data loss prevention, and responding to security alerts. Key skills include experience with cloud security tools, threat detection, security policy development, and analyzing security risks</li>
</ul></div></div></div><div><div><div><b>Location</b></div>
<div>Hyderabad</div>
</div><div><div><b>Job Function</b></div>
<div>TECHNOLOGY</div>
</div><div><div><b>Role</b></div>
<div>Assistant</div>
</div><div><div><b>Job Id</b></div>
<div>402935</div>
</div><div><div><b>Desired Skills</b></div>
<div>Microsoft Defender for Endpoint | Cyber Security | Symantec Endpoint Security</div>
</div></div><p>Desired Candidate Profile
</p><div><div><b>Qualifications</b> : BACHELOR OF COMMERCE, BACHELOR OF COMPUTER APPLICATION, BACHELOR OF COMPUTER SCIENCE, BACHELOR OF ENGINEERING</div></div></div><div></div>

Defender Admin

Customers Bank

<p></p><div><p>At Customers Bank, we believe in working hard, working smart, working together to deliver memorable customer experiences and having fun. Our vision, mission, and values guide us along our path to achieve excellence. Passion, attitude, creativity, integrity, alignment, and execution are cornerstones of our behaviors. They define who we are as an organization and as individuals. Everyone is encouraged to have personal development plans. By doing so, our team members are on their way to achieve their highest potential and be successful in their personal and professional lives.</p><p></p><p>
Must be legally eligible to work in the United States without sponsorship, now or in the future, to be considered.</p><p></p><p><b>
Who is Customers Bank?</b></p><p>
Founded in 2009, Customers Bank is a super-community bank with over $22 billion in assets. We believe in dedicated personal service for the businesses, professionals, individuals, and families we work with.</p><p></p><p><b>
We get you further, faster.
</b></p><p><b>Focused on you: </b>We provide every customer with a single point of contact. A dedicated team member who&rsquo;s committed to meeting your needs today and tomorrow.</p><p><b>
On the leading edge:</b> We&rsquo;re innovating with the latest tools and technology so we can react to market conditions quicker and help you get ahead.</p><p><b>
Proven reliability:</b> We always ground our innovation in our deep experience and strong financial foundation, so we&rsquo;re a partner you can trust.</p><p></p><p><b>
What You&rsquo;ll Do</b></p><p>
We are seeking an experienced and motivated Cloud Security Specialist is accountable for evaluating the Bank&rsquo;s cloud security posture, cloud environment (Azure and Office) and overall security. They are responsible for implementing proactive security initiatives in the Bank&rsquo;s cloud and email environments and the discovery of sensitive data and ensuring DLP strategies are deployed.</p><p>
This position requires the candidate to have knowledge in configuring and implementation of different Azure and Microsoft Defender (CASB) tools/solutions.</p><p></p><p><b>
Key Responsibilities:</b></p><p></p><ul><li>
Develop, implement, and maintain cloud security strategies, policies, and standards across the organization.</li><li>
Integrate security best practices into multi-cloud and hybrid environments (e.g., AWS, Azure, GCP).</li><li>
Monitor cloud environments for security threats, vulnerabilities, and breaches.</li><li>
Respond to security incidents by identifying root causes, mitigating risks, and coordinating corrective measures.</li><li>
Collaborate with the Incident Response team to analyze cloud-specific threats and resolve issues promptly.</li><li>
Conduct risk assessments for cloud platforms and services to identify and mitigate potential security threats.</li><li>
Ensure compliance with industry standards, regulations, and frameworks (e.g., ISO 27001, SOC 2, NIST, CIS benchmarks).</li><li>
Provide security guidance to ensure adherence to organizational security policies.</li><li>
Implement least privilege principles and ensure secure authentication and authorization mechanisms.</li><li>
Assist in securing cloud infrastructure services, including storage, compute, containers, and networks.</li><li>
Assist in supporting cloud security log monitoring architecture, design and implementation activities</li><li>
Develop and deploy automated security solutions for continuous monitoring, threat detection, and configuration management.</li><li>
Perform regular audits to ensure effective use of security tools and technologies.</li><li>
Implement remediations and proactive measures to address vulnerabilities and misconfigurations.</li><li>
Collaborate with cross-functional teams (e.g., DevOps, IT, compliance) to embed security into cloud projects and initiatives.</li><li>
Educate staff and stakeholders on cloud security risks, technologies, and best practices.</li><li>
Document cloud security policies, processes, and incidents.</li><li>
Generate reports for stakeholders, summarizing cloud security posture, risks, and improvements.</li><li>
Stay up-to-date with evolving cloud security trends, technologies, and threats.</li><li>
Provide recommendations to enhance the overall cloud security posture and align with organizational goals.</li></ul><p></p><p><b>
Suggested Skills</b></p><ul><li>
Financial industry experience</li><li>
Knowledge of Cloud/Azure best security practices, DLP and how to configure best practices for data protection and how to discover sensitive data/PII and preform security assessments on cloud environments</li><li>
Experience with cloud provider and using security tools and techniques.</li><li>
Knowledge of cloud services and their attack surface.</li><li>
Related industry certifications (Sec+, CTIA, CISSP)
</li></ul><p></p><p><b>Qualifications</b></p><ul><li>
Bachelor's Degree in Computer Science, Cybersecurity, or similar work experience in a related field</li><li>
Cloud security experience
</li><li>2-3 years of cyber security experience
</li><li>Constant learner
</li><li>Has experience in at least one of the main cloud providers (AWS, Azure, Google)</li></ul><p></p><p>
Customers Bank is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.</p><p></p><p><br>
We also provide &ldquo;reasonable accommodations&rdquo;, upon request, to qualified individuals with disabilities, in accordance with the Americans with Disabilities Act and applicable state and local laws.</p><p></p><p><br>
Diversity Statement:</p><p></p><p><br>
At Customers Bank, we believe in working smart, working together, and having fun while delivering innovative solutions and memorable experiences for our customers. We are committed to the continual advancement of a culture which reflects the value we place on diversity, equity, and inclusion. We honor the diverse experiences, perspectives, and identities of our team members, and we recognize that it is their passion, creativity, and integrity that drives our success. Step into your future with us! Let&rsquo;s take on tomorrow.</p></div><p></p>

Cloud Security Specialist

<div><p>AVA Consulting is seeking an Application Security Analyst Location: Plano, TX (Hybrid) U.S. Citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time. Company Background : Our client, a major employer in the area, is looking for an Application Security Analyst to be part of its team in its North American operations.</p>
<p>Description: We are seeking a skilled and proactive Application Security Analyst to integrate security practices into our client s DevOps processes. The ideal candidate will work closely with development and operations team to ensure secure software delivery pipelines, automate security controls, and foster a culture of shift left in the organization.</p>
<p>Responsibilities:</p>
<ul><li>Design, implement, and maintain secure CI/CD pipelines.</li>
<li>Integrate security tools (SAST, DAST, SCA, etc.) into development workflows.</li>
<li>Collaborate with development and operations teams to remediate vulnerabilities.</li>
<li>Automate security testing and compliance checks.</li>
<li>Monitor and respond to security incidents in cloud and container environments.</li>
<li>Develop and enforce security policies, standards, and procedures.</li>
<li>Stay current with emerging security threats and DevSecOps best practices.</li>
</ul><p>Requirements: Bachelor's degree in Computer Science, Cybersecurity, or related field. 3+ years of experience in DevOps, Security Engineering, or related roles. 2-3 years of security experience. Strong understanding of CI/CD tools (e.g., Jenkins, Harness). Development knowledge on Java, Python, .Net, etc Experience with security tools (e.g., Veracode, GHAS, Orca). Proficiency in scripting languages (e.g., Python, Bash). Familiarity with containerization and orchestration (Docker, Kubernetes). Knowledge of cloud platforms (AWS, Azure, Google Cloud Platform) and their security features. Understanding of secure coding practices and application security principles. Knowledge of Infrastructure as Code (Terraform, Ansible).</p>
<p>NOTE: Interested Candidates can apply by sending their Updated Resume and Contact Details. OpenKyber</p>
<p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

OCI DevOps Professional

cFocus Software Incorporated

<div><h1 class="jobSectionHeader"><b>Cyber Threat Intelligence Analyst Job Description</b></h1><b>
Position: </b>Cyber Threat Intelligence Analyst<br>
<b>Program: </b>SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader"><b>
Position Summary</b></h2>
The Cyber Threat Intelligence Analyst supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by delivering advanced cyber threat intelligence, threat analysis, proactive threat hunting, and operational cybersecurity support services.<br>
The Cyber Threat Intelligence Analyst is responsible for collecting, analyzing, correlating, and disseminating actionable cyber threat intelligence to support the SBA Security Operations Center (SOC), cybersecurity operations, incident response activities, and enterprise risk mitigation efforts. The position supports 24x7x365 cybersecurity operations through advanced analysis of indicators of compromise (IOCs), adversary tactics, techniques, and procedures (TTPs), emerging vulnerabilities, and threat actor activity impacting federal information systems and cloud environments.<h2 class="jobSectionHeader"><b>
Essential Duties and Responsibilities</b></h2><ul><li>
Provide cyber threat intelligence and operational analysis support for the SBA SOC in support of Task Area 3.5.3 Cybersecurity Operations Support.</li><li>
Conduct proactive cyber threat hunting activities across enterprise systems, cloud environments, endpoints, and network infrastructure.</li><li>
Analyze indicators of compromise (IOCs), threat actor tactics, techniques, and procedures (TTPs), malware behaviors, and emerging cyber threats.</li><li>
Monitor and evaluate cyber threat intelligence feeds, vendor reporting, CISA advisories, US-CERT alerts, and external intelligence sources.</li><li>
Perform advanced correlation and analysis of security events, SIEM data, IDS/IPS alerts, EDR telemetry, DNS logs, firewall logs, and network traffic.</li><li>
Support incident response and cybersecurity investigations through intelligence-driven analysis and threat attribution support.</li><li>
Develop cyber threat intelligence reports, operational briefings, situational awareness products, and executive-level summaries.</li><li>
Assist with the identification of previously unknown attack vectors and suspicious activity through threat hunting and anomaly analysis.</li><li>
Support digital forensics and incident analysis activities in coordination with SOC analysts, engineers, and incident responders.</li><li>
Develop and maintain threat intelligence playbooks, threat models, attack scenarios, and adversary profiles.</li><li>
Perform analysis of cloud security events and cyber threats impacting Microsoft 365, Azure, AWS, Salesforce, and hybrid cloud environments.</li><li>
Conduct research on advanced persistent threats (APTs), ransomware groups, insider threats, nation-state actors, and emerging cyber attack trends.</li><li>
Provide recommendations for defensive countermeasures, detection logic improvements, and enhanced security monitoring capabilities.</li><li>
Assist in the development of threat signatures, SIEM use cases, detection analytics, and threat detection content.</li><li>
Support continuous improvement of cybersecurity operations, threat intelligence workflows, and incident response processes.</li><li>
Coordinate with federal stakeholders, law enforcement, privacy officials, insider threat teams, and mission partners during cyber incident activities.</li><li>
Document investigative findings, intelligence assessments, and operational actions within case management and reporting systems.</li><li>
Participate in SOC operational meetings, shift briefings, incident coordination calls, and cybersecurity readiness activities.</li><li>
Maintain awareness of evolving cybersecurity technologies, federal threat reporting requirements, and NIST cybersecurity guidance.</li><li>
Support cybersecurity communications, intelligence sharing, and collaboration activities across the SBA enterprise.</li></ul><h2 class="jobSectionHeader"><b>
Minimum Qualifications</b></h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, Intelligence Studies, Information Assurance, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 5 years of experience supporting cybersecurity operations, cyber threat intelligence, threat hunting, incident response, or SOC operations.</li><li>
Experience analyzing threat intelligence, indicators of compromise, adversary TTPs, and cybersecurity attack methodologies.</li><li>
Hands-on experience with SIEM, EDR, IDS/IPS, network analysis, and cyber defense tools.</li><li>
Experience conducting threat hunting and advanced event correlation across enterprise environments.</li><li>
Knowledge of federal cybersecurity frameworks and guidance including NIST SP 800-61, NIST SP 800-53, and CISA operational guidance.</li><li>
Understanding of MITRE ATT&amp;CK framework and cyber kill chain methodologies.</li><li>
Experience with cloud security monitoring and threat analysis in Microsoft Azure, AWS, Microsoft 365, and hybrid environments.</li><li>
Strong analytical, investigative, communication, and reporting skills.</li><li>
Ability to support 24x7x365 cybersecurity operational environments.</li></ul><h2 class="jobSectionHeader"><b>
Preferred Certifications</b></h2><ul><li>
GIAC Cyber Threat Intelligence (GCTI)</li><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
CompTIA CySA+</li><li>
Certified Ethical Hacker (CEH)</li><li>
Splunk Enterprise Security Certified Admin</li><li>
Microsoft Security Operations Analyst Associate (SC-200)</li></ul><p>
</p><p>Pw75tUj9Bf</p></div>

SBA - Cyber Threat Intelligence Analyst

Search 10000+ Cloud security analyst jobs near you this May. New roles added regularly across leading industries. Apply today.