cloud security analyst

Openkyber

<div>A client of OpenKyber is immediately hiring for a Technical Business Analyst Position type: Contract Duration: 12 months Location:- 3 days onsite role at Plano, TX
As a Technical Business Analyst, you will:
Top Skills: OpenShift &amp; Cloud Deployment (Core Focus Area):
<ul><li>AML systems deal with high-volume transaction monitoring, requiring scalable and resilient infrastructure.</li>
<li>Cloud and OpenShift enable:
<ul><li>Elastic scaling for transaction spikes</li>
<li>High availability for mission-critical compliance systems</li>
<li>Faster deployments through containerization and CI/CD</li>
<li>Enhanced security and governance, crucial for financial systems</li>
</ul></li></ul>Required Skills &amp; Qualifications:
<ul><li>Strong understanding of AML / Financial Crime / Compliance systems.</li>
<li>Hands-on experience or strong exposure to:
<ul><li>OpenShift / Kubernetes</li>
<li>Cloud platforms (AWS, Azure, or GCP)</li>
<li>CI/CD tools (Jenkins, GitLab, etc.)</li>
</ul></li><li>Experience working in Agile/Scrum environments.</li>
<li>Knowledge of API integrations, microservices, and distributed systems.</li>
<li>Strong communication and stakeholder management skills.</li>
</ul>Preferred Qualifications:
<ul><li>Scrum Master Certification (CSM/SAFe)</li>
<li>Experience with containerization (Docker)</li>
<li>Understanding of DevOps practices</li>
<li>Prior experience in large-scale banking or financial institutions</li>
</ul>Qualified candidates should APPLY NOW for immediate consideration! This position is only open to applicants who can be engaged on a W-2 basis.
Please hit APPLY to provide the required information, and we will be back in touch as soon as possible.
We are currently interviewing to fill this and other similar positions. If this role is not a fit for you, we do offer a referral bonus program for referrals that we successfully place with our clients, subject to program guidelines. ASK ME HOW.
Thank you!
PAY RANGE AND BENEFITS: Pay Range*: $58- $60 per hour *Pay range offered to a successful candidate will be based on several factors, including the candidate's education, work experience, work location, specific job duties, certifications, etc.
Benefits: OpenKyber offers benefits( based on eligibility) that include the following: Medical &amp; pharmacy coverage, Dental/vision insurance, 401(k), Health saving account (HSA) and Flexible spending account (FSA), Life Insurance, Pet Insurance, Short term and Long term Disability, Accident &amp; Critical illness coverage, Pre-paid legal &amp; ID theft protection, Sick time, and other types of paid leaves (as required by law), Employee Assistance Program (EAP).
ABOUT OpenKyber: Founded in 1998 and headquartered in Atlanta, Georgia, OpenKyber employs approximately 50,000 professionals worldwide and reports an annual revenue approaching $3 Billion. Through our global delivery centers across North America, Asia, and Europe, we deliver strategic technology and business transformation solutions to our clients, enabling them to operate as leaders within their fields.
Recent Recognitions: Named One of America's Best Employers for New Grads by Forbes (2024 Named One of the Best Companies to Work for by U.S. News &amp; World Report (Private Companies List, 2024-2025) One of the Largest IT Staffing Firms in the US Ranked #3 by Staffing Industry Analysts (SIA, 2024) One of the Largest Staffing Firms in the US Ranked #13 by Staffing Industry Analysts (SIA, 2024; includes OpenKyber, Volt, &amp; HireGenics) Named One of the Top Ten Private Companies in Atlanta by the Atlanta Business Chronicle (2023) One of the Largest Certified Minority Business Enterprises (MBEs) in the United States (NMSDC, 2024) AWS Advanced Tier Services Partner with 100+ certifications
OpenKyber offers a referral bonus for qualified Ambassadors who refer eligible referrals. Submit referrals at https://openkyber.workllama.com/atsuser/anonreferafriend and earn $250-$1,000 per referral.
OpenKyber is an Equal Opportunity Employer and prohibits any kind of unlawful discrimination and harassment. OpenKyber is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment on the basis of race, color, religion or belief, national origin, citizenship, social or ethnic origin, sex, age, physical or mental disability, veteran status, marital status, domestic partner status, sexual orientation, or any other status protected by the statutes, rules, and regulations in the locations where it operates.
If you are an individual with a disability and need a reasonable accommodation to assist with your job search or application for employment, please contact us at hirings@openkyber.com or (770) 493-5588. Please indicate the specifics of the assistance needed.
OpenKyber encourages all interested and qualified candidates to apply for employment opportunities. OpenKyber (HireGenics/Volt) does not discriminate against applicants based on citizenship status, immigration status, or national origin, in accordance with 8 U.S.C. 1324b.
The company will consider for employment qualified applicants with arrest and conviction records in a manner that complies with the San Francisco Fair Chance Ordinance, the Los Angeles Fair Chance Initiative for Hiring Ordinance, and other applicable laws.
By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from OpenKyber and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help.
You can access our privacy policy at Privacy Policy - openkyber .
For applications and inquiries, contact: hirings@openkyber.com</div>

Junior Cloud Security Analyst

Alignerr

<div>
 
 Data Security &amp; DLP Analyst (AI Training)
 
 
 
 
 About The Role
 
 
 
 We partner with the world's leading AI research teams to build smarter, safer AI systems. Now we're looking for data security professionals who understand how sensitive information is exposed, detected, and protected in the real world &mdash; and want to put that knowledge to work shaping the next generation of AI.
 
 
 This is a unique opportunity to move beyond traditional security ops and directly influence how AI reasons about data risk, privacy, and protection at scale.
 
 
 <ul>
 <li>
 Organization: Alignerr
 </li>
 <li>
 Type: Hourly Contract
 </li>
 <li>
 Location: Remote
 </li>
 <li>
 Commitment: 10&ndash;40 hours/week
 
 
 </li>
 </ul>
 
 What You'll Do
 
 
 
 <ul>
 <li>
 Analyze realistic data security and DLP scenarios across cloud, SaaS, and enterprise environments
 </li>
 <li>
 Classify data sensitivity levels, exposure paths, and policy violations
 </li>
 <li>
 Evaluate prevention, detection, and response strategies for realism and accuracy
 </li>
 <li>
 Generate, label, and validate data-security cases used to train and benchmark AI systems
 </li>
 <li>
 Help AI models understand how real-world data leaks happen &mdash; and how they should be stopped
 
 
 </li>
 </ul>
 
 Who You Are
 
 
 
 <ul>
 <li>
 2+ years of experience in data security, compliance, information security, or security operations
 </li>
 <li>
 Familiar with DLP tools, data classification frameworks, and privacy or regulatory concepts (GDPR, HIPAA, PCI-DSS, etc.)
 </li>
 <li>
 Practical understanding of how data risk plays out across modern enterprise environments
 </li>
 <li>
 Able to think like both an attacker and a defender when assessing exposure scenarios
 </li>
 <li>
 Detail-oriented, self-motivated, and comfortable working independently and asynchronously
 
 
 </li>
 </ul>
 
 Nice to Have
 
 
 
 <ul>
 <li>
 Hands-on experience with DLP platforms (Microsoft Purview, Forcepoint, Symantec, etc.)
 </li>
 <li>
 Background in cloud security, insider threat detection, or incident response
 </li>
 <li>
 Familiarity with AI training, annotation, or evaluation workflows
 </li>
 <li>
 Security certifications such as CISSP, CISM, CISA, or CompTIA Security+
 
 
 </li>
 </ul>
 
 Why Join Us
 
 
 
 <ul>
 <li>
 Work directly on frontier AI systems alongside top research labs
 </li>
 <li>
 Fully remote and flexible &mdash; set your own schedule
 </li>
 <li>
 Freelance autonomy with meaningful, intellectually engaging work
 </li>
 <li>
 Contribute to AI that reasons more accurately about real-world security risks
 </li>
 <li>
 Potential for ongoing work and contract extension
 </li>
 </ul>
</div>

Data Security & DLP Analyst

TDI (Tetrad Digital Integrity)

<div>
 Tetrad Digital Integrity (TDI) is a cybersecurity firm built for high-consequence environments where mission, complexity, and trust intersect. Our single focus has been delivering cyber solutions to effectively manage risk &amp; the business of cyber for 25 years!
 
 
 TDI is seeking a Junior Cloud RMF Analyst to support RMF and security execution for a mission-critical cloud-hosted defense system. This is a growth role for an early-career cybersecurity professional who is organized, coachable, mission-focused, and ready to build real-world experience in DoD cloud security and RMF operations. The role is designed for candidates with a solid foundation in cybersecurity, an active clearance, and the discipline to operate in a high-visibility environment where accuracy, follow-through, and customer trust matter.
 
 This is not a passive documentation role, but it is also not a sink-or-swim senior ISSO position. You will work alongside experienced ISSOs, ISSMs, and engineering teams to support the RMF engine room: maintaining artifact quality, tracking POA&amp;Ms, collecting and organizing evidence, supporting Continuous Monitoring, and helping ensure that documentation stays aligned to system reality as the environment evolves. If you are the kind of person who learns quickly, writes clearly, stays organized under pressure, and wants to grow into a cloud-savvy ISSO role supporting consequential national security systems, we want to meet you.
 
 
 
 This position will require hybrid commute to the DC area.
 
 
 
 
 RESPONSIBILITIES:
 
 <ul>
 <li>
 Support day-to-day RMF execution across the system lifecycle under the guidance of senior cybersecurity staff
 </li>
 <li>
 Assist with development and maintenance of RMF artifacts including SSPs, SAR support materials, POA&amp;Ms, control implementation details, evidence mappings, and supporting documentation
 </li>
 <li>
 Collect, organize, and maintain evidence needed to support assessments, audits, Continuous Monitoring, and authorization activities
 </li>
 <li>
 Support POA&amp;M management with discipline: track remediation items, owners, due dates, status updates, and closure evidence
 </li>
 <li>
 Help ensure documentation, evidence, and system reality remain aligned as approved changes occur through normal governance and configuration management processes
 </li>
 <li>
 Support Continuous Monitoring activities by maintaining artifact freshness, tracking recurring deliverables, and helping prepare metrics and status updates
 </li>
 <li>
 Review vulnerability scan outputs, STIG findings, and remediation documentation to support compliance tracking and risk reduction efforts
 </li>
 <li>
 Coordinate with engineering, platform, and DevSecOps teams to gather evidence and confirm implementation details for security controls
 </li>
 <li>
 Support security documentation and control traceability for cloud-hosted environments, including systems using modern platforms and managed cloud services
 </li>
 <li>
 Contribute to process improvement efforts that reduce manual compliance work and improve quality, consistency, and audit readiness
 </li>
 <li>
 Build practical knowledge of DoD RMF, NIST SP 800-53, cloud security concepts, and real-world control implementation in operational environments
 </li>
 </ul>
 
 QUALIFICATIONS:
 
 <ul>
 <li>
 Active Secret clearance
 </li>
 <li>
 Bachelor&rsquo;s degree in cybersecurity, information systems, computer science, engineering, or a related field, or equivalent relevant experience
 </li>
 <li>
 1&ndash;2 years of experience in cybersecurity, cloud security, compliance, risk management, IT operations, or related technical work
 </li>
 <li>
 Security+ certification
 </li>
 <li>
 Foundational knowledge of RMF, NIST SP 800-53, FedRAMP, or related cybersecurity/compliance frameworks
 </li>
 <li>
 Basic familiarity with one or more cloud platforms such as AWS, Azure, or GCP, active path to obtain professional-level Google certification within a defined period after hire, is preferred
 </li>
 <li>
 Familiarity with core security concepts such as access control, logging and monitoring, vulnerability management, configuration management, encryption, and incident response
 </li>
 <li>
 Strong writing and communication skills with the ability to produce clear, professional, customer-ready documentation with guidance
 </li>
 <li>
 Strong organizational skills, attention to detail, and follow-through across multiple tasks in a fast-moving environment
 </li>
 <li>
 Ability to learn quickly, accept coaching, and work effectively with both technical and non-technical stakeholders
 </li>
 </ul>
 
 PREFERRED QUALIFICATIONS:
 
 <ul>
 <li>
 Exposure to cybersecurity internships, academic research, lab work, cloud coursework, or compliance documentation
 </li>
 <li>
 Familiarity with SSPs, POA&amp;Ms, STIGs, Nessus/ACAS, or audit/evidence collection is preferred
 
 </li>
 </ul>
 
 OVERALL MATCH:
 
 
 We are seeking early-career professionals who have already demonstrated a track record of excellence through academics, military service, internships, research, certifications, or hands-on technical work. The ideal candidate brings discipline, intellectual curiosity, strong writing, and a genuine drive to master cybersecurity, cloud, RMF, and emerging technologies. This is a true entry point into mission-critical defense work, but it is intended for high-potential performers who are ready to learn quickly, execute with rigor, and grow into larger responsibility over time.
 
 &nbsp;
</div>

DoW Junior Cloud RMF Analyst

Tetrad Digital Integrity LLC

<div>Tetrad Digital Integrity (TDI) is a cybersecurity firm built for high-consequence environments where mission, complexity, and trust intersect. Our single focus has been delivering cyber solutions to effectively manage risk &amp; the business of cyber for 25 years! 
 
TDI is seeking a Junior Cloud RMF Analyst to support RMF and security execution for a mission-critical cloud-hosted defense system. This is a growth role for an early-career cybersecurity professional who is organized, coachable, mission-focused, and ready to build real-world experience in DoD cloud security and RMF operations. The role is designed for candidates with a solid foundation in cybersecurity, an active clearance, and the discipline to operate in a high-visibility environment where accuracy, follow-through, and customer trust matter. 
This is not a passive documentation role, but it is also not a sink-or-swim senior ISSO position. You will work alongside experienced ISSOs, ISSMs, and engineering teams to support the RMF engine room: maintaining artifact quality, tracking POA&amp;Ms, collecting and organizing evidence, supporting Continuous Monitoring, and helping ensure that documentation stays aligned to system reality as the environment evolves. If you are the kind of person who learns quickly, writes clearly, stays organized under pressure, and wants to grow into a cloud-savvy ISSO role supporting consequential national security systems, we want to meet you.<div> 

This position will require hybrid commute to the DC area.</div> 

RESPONSIBILITIES:<ul><li>
Support day-to-day RMF execution across the system lifecycle under the guidance of senior cybersecurity staff.</li><li>
Assist with development and maintenance of RMF artifacts including SSPs, SAR support materials, POA&amp;Ms, control implementation details, evidence mappings, and supporting documentation.</li><li>
Collect, organize, and maintain evidence needed to support assessments, audits, Continuous Monitoring, and authorization activities.</li><li>
Support POA&amp;M management with discipline: track remediation items, owners, due dates, status updates, and closure evidence.</li><li>
Help ensure documentation, evidence, and system reality remain aligned as approved changes occur through normal governance and configuration management processes.</li><li>
Support Continuous Monitoring activities by maintaining artifact freshness, tracking recurring deliverables, and helping prepare metrics and status updates.</li><li>
Review vulnerability scan outputs, STIG findings, and remediation documentation to support compliance tracking and risk reduction efforts.</li><li>
Coordinate with engineering, platform, and DevSecOps teams to gather evidence and confirm implementation details for security controls.</li><li>
Support security documentation and control traceability for cloud-hosted environments, including systems using modern platforms and managed cloud services.</li><li>
Contribute to process improvement efforts that reduce manual compliance work and improve quality, consistency, and audit readiness.</li><li>
Build practical knowledge of DoD RMF, NIST SP 800-53, cloud security concepts, and real-world control implementation in operational environments.</li></ul>
QUALIFICATIONS:<ul><li>
Active Secret clearance.</li><li>
Bachelor&rsquo;s degree in cybersecurity, information systems, computer science, engineering, or a related field, or equivalent relevant experience.</li><li>
1&ndash;2 years of experience in cybersecurity, cloud security, compliance, risk management, IT operations, or related technical work.</li><li>
Security+ certification.</li><li>
Foundational knowledge of RMF, NIST SP 800-53, FedRAMP, or related cybersecurity/compliance frameworks.</li><li>
Basic familiarity with one or more cloud platforms such as AWS, Azure, or GCP, active path to obtain professional-level Google certification within a defined period after hire, is preferred.</li><li>
Familiarity with core security concepts such as access control, logging and monitoring, vulnerability management, configuration management, encryption, and incident response.</li><li>
Strong writing and communication skills with the ability to produce clear, professional, customer-ready documentation with guidance.</li><li>
Strong organizational skills, attention to detail, and follow-through across multiple tasks in a fast-moving environment.</li><li>
Ability to learn quickly, accept coaching, and work effectively with both technical and non-technical stakeholders.</li></ul>
PREFERRED QUALIFICATIONS:<ul><li>
Exposure to cybersecurity internships, academic research, lab work, cloud coursework, or compliance documentation.</li><li>
Familiarity with SSPs, POA&amp;Ms, STIGs, Nessus/ACAS, or audit/evidence collection is preferred.</li></ul> 

OVERALL MATCH: 
We are seeking early-career professionals who have already demonstrated a track record of excellence through academics, military service, internships, research, certifications, or hands-on technical work. The ideal candidate brings discipline, intellectual curiosity, strong writing, and a genuine drive to master cybersecurity, cloud, RMF, and emerging technologies. This is a true entry point into mission-critical defense work, but it is intended for high-potential performers who are ready to learn quickly, execute with rigor, and grow into larger responsibility over time. 
TDI does business with the federal government, which restricts employment to individuals who are either US citizens or lawful permanent residents of the United States.
&ldquo;TDI is an Equal Opportunity Employer. Employment decisions are made based on individual qualifications, merit, and business needs. We do not discriminate in employment opportunities or practices based on race, color, religion, sex, or national origin, in accordance with applicable federal laws.&rdquo;
suyFgZWHfY</div>

<div>
 
 AI / Emerging Tech Security Analyst (AI Training)
 
 
 
 
 About The Role
 
 
 
 What if your security expertise could directly shape how the world's most powerful AI systems defend themselves against attack? We're looking for AI Security Analysts to probe, stress-test, and evaluate frontier AI models &mdash; identifying how they can be manipulated, misused, or pushed beyond their intended boundaries before those vulnerabilities cause real-world harm.
 
 
 This is a fully remote, flexible contract role for security professionals who are curious about AI and want to work at the cutting edge of both fields. If you think in threat models, love finding what breaks, and want your work to matter &mdash; this is the role for you.
 
 
 <ul>
 <li>
 Organization: Alignerr
 </li>
 <li>
 Type: Hourly Contract
 </li>
 <li>
 Location: Remote
 </li>
 <li>
 Commitment: 10&ndash;40 hours/week
 
 
 </li>
 </ul>
 
 What You'll Do
 
 
 
 <ul>
 <li>
 Analyze AI and LLM security scenarios to understand how models behave under adversarial or unexpected conditions
 </li>
 <li>
 Review and evaluate cases involving prompt injection, data leakage, model abuse, and system misuse
 </li>
 <li>
 Classify security vulnerabilities and recommend appropriate mitigations based on real-world impact and likelihood
 </li>
 <li>
 Apply threat modeling frameworks to emerging AI technologies and deployment contexts
 </li>
 <li>
 Help evaluate and improve AI system behavior so it remains safe, reliable, and aligned with security best practices
 </li>
 <li>
 Work independently and asynchronously on task-based assignments at your own pace
 
 
 </li>
 </ul>
 
 Who You Are
 
 
 
 <ul>
 <li>
 Background in cybersecurity, information security, or a closely related field
 </li>
 <li>
 Strong understanding of security threat modeling applied to modern software systems
 </li>
 <li>
 Genuinely curious about how AI systems are built, deployed, and potentially exploited
 </li>
 <li>
 Analytical and precise &mdash; you approach complex systems methodically and don't miss edge cases
 </li>
 <li>
 Clear written communicator who can document findings and reasoning with structure and confidence
 </li>
 <li>
 Self-motivated and reliable when working independently without supervision
 
 
 </li>
 </ul>
 
 Nice to Have
 
 
 
 <ul>
 <li>
 Hands-on experience with penetration testing, red teaming, or vulnerability research
 </li>
 <li>
 Familiarity with large language models (LLMs), AI APIs, or prompt engineering concepts
 </li>
 <li>
 Background in application security, cloud security, or API security
 </li>
 <li>
 Experience with adversarial machine learning or AI safety concepts
 </li>
 <li>
 Certifications such as OSCP, CEH, CISSP, or equivalent practical experience
 
 
 </li>
 </ul>
 
 Why Join Us
 
 
 
 <ul>
 <li>
 Work directly on frontier AI systems alongside the world's leading AI research labs
 </li>
 <li>
 Fully remote and flexible &mdash; work when and where it suits you
 </li>
 <li>
 Freelance autonomy with the structure of meaningful, high-stakes work
 </li>
 <li>
 Be at the forefront of an entirely new discipline &mdash; AI security is one of the most important emerging fields in tech
 </li>
 <li>
 Potential for ongoing work and contract extension as new projects launch
 </li>
 </ul>
</div>

AI / Emerging Tech Security Analyst

Apex Technology

<div>Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge.
For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles.
Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more.
We&rsquo;d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.<h1 class="jobSectionHeader">
About the Role</h1>
We are seeking a Cloud Security Engineer to design, implement, maintain, and optimize secure cloud environments supporting U.S. government, DoD, and intelligence community missions. 
 
This role plays a critical part in protecting classified and sensitive data in AWS, Azure, and hybrid/multi-cloud infrastructures while ensuring full compliance with federal standards such as NIST 800-53, FedRAMP, RMF, and DoD Impact Levels (IL-4/IL-5).
 
 
The candidate must hold an active Secret clearance (TS/SCI preferred) and bring hands-on experience securing cloud platforms in regulated environments. This role will help the organization meet industry standards such as SOC2, ISO 27001, PCI-DSS, GDPR/CCPA, or other relevant compliance frameworks.<h1 class="jobSectionHeader">
Responsibilities:
</h1><ul><li>Design and implement secure cloud architectures and configurations across AWS GovCloud, Azure, and/or Google Cloud, applying best practices for least privilege encryption, network segmentation, and data protection.</li><li>
Implement and maintain cloud security frameworks, ensuring ongoing compliance with NIST 800-53 Rev. 5, FedRAMP, DoD IL-2/4/5, RMF, and Secure Cloud Computing Architecture (SCCA) requirements.</li><li>
Configure and manage Identity and Access Management (IAM), Role-Based Access Control (RBAC), Just-In-Time (JIT) access, Key Vaults, and Zero Trust Architecture (ZTA) principles across cloud environments.
</li><li>Engineer, deploy, and optimize cloud-native security tools, including Microsoft Defender for Cloud, Azure Sentinel, AWS GovCloud security services, CSPM/CWPP solutions, and SIEM (Elastic) platforms for threat detection, monitoring, and response.</li><li>
Conduct vulnerability assessments, penetration testing simulations, security configuration reviews (against STIGs, CIS benchmarks, and NIST controls), and continuous 
monitoring of cloud resources.</li><li>
Develop, maintain, and update System Security Plans (SSP), Security Assessment Reports (SAR), Plans of Action &amp; Milestones (POA&amp;M), and risk/compliance reporting for cloud-based operations.</li><li>
Identify, analyze, and respond to Indicators of Compromise (IoCs), threat intelligence, and security incidents within cloud environments; perform root-cause analysis and implement preventive controls.
</li><li>Perform periodic security reviews and audits of cloud environments (Azure, AWS, hybrid) to ensure sustained compliance, mitigate evolving threats, and update policies/procedures.</li><li>
Collaborate with DevSecOps, infrastructure, and development teams to integrate security into CI/CD pipelines, automate security controls, and support secure cloud migrations or 
modernization initiatives.</li><li>
Assess current cloud architectures, propose security improvements, review designs through a security lens, and serve as a subject-matter expert on cloud security tools, 
processes, and best practices.</li><li>
Coordinate with configuration management teams to ensure hardware/software changes adhere to security protocols, maintain version control, and support documentation of the cyber terrain.</li><li>
Develop, enforce, and maintain cloud security policies, standards, and automated guardrails to support secure CI/CD pipelines and infrastructure-as-code (IaC) practices (e.g., using Terraform, CloudFormation).</li><li>
Monitor cloud environments for security incidents, investigate alerts, perform root-cause analysis, and coordinate incident response activities.
</li><li>Identify emerging threats and recommend proactive improvements to cloud security posture, including automation of security controls and processes.</li><li>
Provide guidance and training to engineering teams on secure cloud design patterns and best practices.</li><li>
Ability to be on-site 5 days a week at our office Playa Vista.
</li></ul><h1 class="jobSectionHeader">Requirements:</h1><ul><li>
Security Clearance: Active U.S. Secret clearance required (TS/SCI)</li><li>
Must be a U.S. citizen.</li><li>
Education: Bachelor&rsquo;s degree in Cybersecurity, Information Assurance, Computer Science, or a related field (or 5+ years equivalent professional experience in cloud security engineering)</li><li>
Experience: 5&ndash;9+ years in cloud security engineering, with hands-on work in AWS GovCloud, Azure, Google GCP, or multi-cloud environments.
</li><li>Strong analytical, problem-solving, communication, and collaboration skills; ability to work in fast-paced, mission-critical environments. 
 
<h1 class="jobSectionHeader">Technical Skills:</h1><ul><li>
Deep knowledge of cloud platforms (AWS GovCloud, Azure Government, etc.), IAM/RBAC, encryption, network security, and cloud-native security services.</li><li>
Familiarity with SIEM, vulnerability scanners, threat intelligence, and automation tools (e.g., Terraform, Python scripting).</li><li>
Experience with compliance frameworks (NIST, FedRAMP, RMF) and tools like Azure Sentinel, NESSUS, BURP SUITE, Microsoft Defender, or AWS equivalents.</li><li>
Deep understanding of network security, encryption, logging/monitoring, and container/Kubernetes security.</li><li>
Experience with infrastructure-as-code, scripting (Python, PowerShell, etc.), and security automation tools.</li></ul></li><li>
Additional Certifications:
<ul><li>CISSP, AWS Certified Security-Specialty, AWS Certified Solutions Architect (Associate or Professional), Microsoft Certified: Security, Compliance &amp; Identity, Security+, CEH, or CSSP related (e.g., CySA+, GCIH).</li></ul></li></ul><h1 class="jobSectionHeader">
Why Join Apex?</h1>
Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We're a fast-growing startup backed by $200M in Series D funding, and we invest heavily in our people from day one.<h2 class="jobSectionHeader">
What We Offer For Full-time Employees:</h2><ul><li>
Shared upside: Receive equity in Apex, letting you benefit from the work you create</li><li>
Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost</li><li>
Comprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays</li><li>
Competitive 401(k) plan with generous matching - 100% match on first 3%, 50% on next 2%</li><li>
8 weeks paid parental leave plus childcare reimbursement up to $350/day for work-related travel</li><li>
Daily catered lunch and unlimited snacks to keep you fueled throughout the day</li><li>
Vibrant community: Monthly office BBQs, pickleball tournaments, run club, and social gatherings for you and your family</li><li>
Your dream desk setup and all the tools you need to be your most productive self</li><li>
World-class Playa Vista office with EV chargers, with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life</li><li>
Real impact opportunity: Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference</li></ul>
Ready to join a team where your contributions matter and your future is bright? Let's build something extraordinary together.<h1 class="jobSectionHeader">
Equal Opportunity Employer</h1>
Apex Technology, Inc. is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Candidates and employees are always evaluated based on merit, qualifications, and performance. We will never discriminate on the basis of race, color, gender, national origin, ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status.
Compensation Range: $120K - $170K</div>

Cloud Security Engineer

OpenSesame

<div>About OpenSesame

OpenSesame is the trusted partner for Workforce Reinvention in the age of AI. OpenSesame delivers integrated software, curated and customizable content, and expert services &ndash; embedded into existing learning, HR, and work systems &ndash; to help organizations expand their human+AI potential and thrive through change.

Learn more: www.opensesame.com/about

About the Role

As a Senior Security Analyst on our Compliance team, you will play a key role in strengthening OpenSesame's security posture in a fast-moving, high-growth environment. We're looking for someone who brings deep technical security expertise, a proactive mindset, and the ability to turn complex risks into practical, scalable solutions.

This role spans vulnerability management, penetration testing, bug bounty operations, cloud and application security, and audit readiness. You'll partner across Engineering, DevOps, IT, and Compliance to improve security processes, support compliance efforts, and help ensure security is built into how we work, especially as we continue evolving our approach to AI security. We're looking for proven examples from your career that show you can do this job; that you've owned penetration testing programs, built vulnerability management systems, implemented security automation, and helped organizations adopt modern technologies (including AI) securely and responsibly.

You'll be a strong fit if you're detail-oriented, collaborative, and excited to build programs that reduce risk, improve visibility, and support safe innovation across the business.

Performance Objectives

Establish Security Ownership &amp; Technical Depth (0&ndash;6 Months)
<ul>
<li>Develop a comprehensive view of OpenSesame's external attack surface, vulnerabilities, and threat landscape &mdash; integrating signals from CrowdStrike, cloud environments (AWS, GCP), and application security tooling.</li>
<li>Own external penetration testing engagements end-to-end &mdash; including vendor selection, scope design, execution oversight, remediation validation, and executive reporting.</li>
<li>Build and operationalize a structured vulnerability management program &mdash; partnering with DevOps, Engineering, and IT to prioritize and remediate risk effectively.</li>
<li>Stand up scalable evidence collection and control mapping workflows in Drata &mdash; improving audit readiness and reducing manual effort.</li>
<li>Establish strong cross-functional relationships to embed security into engineering, infrastructure, and IT workflows from the outset.</li>
</ul>
Operationalize Continuous &amp; AI-Aware Security (6&ndash;12 Months)
<ul>
<li>Design and implement a continuous penetration testing program that complements annual third-party testing &mdash; leveraging automation, threat modeling, and targeted validation.</li>
<li>Own and mature the bug bounty program &mdash; improving signal quality, triage processes, researcher engagement, and remediation workflows.</li>
<li>Lead implementation of AI security practices across internal systems and product development:
<ul><li>Apply OWASP Top 10 for LLMs / AI systems to identify and mitigate emerging risks</li>
<li>Support adoption and operationalization of ISO 42001 controls</li>
<li>Define secure usage patterns for internal AI tools and third-party AI integrations</li>
</ul></li><li>Partner with Product Engineering to define and enforce secure AI and application baseline requirements &mdash; ensuring security is built into system design, not retrofitted.</li>
<li>Develop automations and tooling (Python, APIs, Make) to continuously collect threat intelligence, validate security baselines, and detect drift across AWS, GCP, GitHub, and SaaS platforms.</li>
<li>Improve Jira and Confluence workflows to create visibility, accountability, and measurable progress across security findings and remediation.</li>
<li>Provide deep technical support during audits &mdash; translating real-world implementations into clear, defensible narratives aligned with ISO 27001, ISO 27701, and ISO 42001.</li>
</ul>
Drive Security Maturity &amp; Compliance Integration (12+ Months)
<ul>
<li>Serve as a senior technical partner to Compliance &mdash; supporting vendor reviews, customer security questionnaires, and control design with practical, implementation-level expertise.</li>
<li>Continuously improve Drata automation and evidence pipelines &mdash; moving toward near real-time compliance visibility.</li>
<li>Partner with Engineering and DevOps leadership to evolve secure development practices, CI/CD security controls, and cloud security baselines.</li>
<li>Establish and refine AI security governance models &mdash; balancing innovation with risk management across internal and customer-facing use cases.</li>
<li>Identify systemic risks, recurring vulnerability patterns, and process inefficiencies &mdash; driving durable, organization-wide improvements.</li>
<li>Contribute to long-term security strategy &mdash; aligning threat management, AI adoption, compliance requirements, and engineering velocity.</li>
</ul>
What Success Looks Like
<ul>
<li>Penetration testing (external and continuous) is predictable, effective, and drives measurable reductions in risk.</li>
<li>Vulnerabilities are prioritized intelligently and remediated within defined SLAs, with clear ownership across teams.</li>
<li>The bug bounty program consistently yields high-quality findings with efficient triage and response.</li>
<li>AI systems and tools are deployed with clear security guardrails aligned to OWASP AI Top 10 and ISO 42001.</li>
<li>Engineering teams proactively incorporate security &mdash; including AI security &mdash; into design and development workflows.</li>
<li>Audit readiness becomes continuous rather than event-driven, with strong evidence pipelines in Drata.</li>
<li>Security is viewed as a strategic enabler of safe innovation, not a bottleneck.</li>
</ul>
You might notice we don't have the typical list of requirements and buzzwords here. That's intentional.

We're looking for proven examples from your career that show you can do this job &mdash; that you've owned penetration testing programs, built vulnerability management systems, implemented security automation, and helped organizations adopt modern technologies (including AI) securely and responsibly.

When you look back a year from now, you'll know you've made OpenSesame more secure, more resilient, and better positioned to innovate with confidence.

Although it should go without saying (but it doesn't), OpenSesame is an equal opportunity employer and we strive to create a welcoming, inclusive environment that celebrates diversity.

Location: This position can be based anywhere in the US. We operate as a remote-first company, and invest in mandatory all-company meetings several times a year in addition to required team travel as necessary.

Performance Driven: We're looking for self-starters with a track record of delivering excellent results, but we're highly selective about who we hire. We don't focus on typical job requirements, instead, we're interested in specific examples from your past experiences. All positions can be based anywhere in the US, and require up to 15 days of travel per year, with senior management and leadership teams requiring up to 35 days.

Compensation: The base salary for this position generally ranges between $130,000 and $160,000, depending on experience. At OpenSesame, we offer a comprehensive benefits package to employees upon hire, including professional development, ISOs, health insurance, 401(k) matching, and paid time off.

Equal Employment Opportunity: OpenSesame is an Equal Employment Opportunity and Affirmative Action employer that values and welcomes diversity. We do not discriminate on the basis of various legally protected characteristics, including criminal history, and strive to provide reasonable accommodations to qualified individuals with disabilities. We prioritize safety and security and may use your information accordingly, and you can contact us for assistance or accommodations during the job application process.

Pay Transparency: At OpenSesame, we prioritize pay transparency, fairness, and equity to create a positive and inclusive work environment, regularly reviewing our compensation practices to align with our values and goals. We provide competitive and fair compensation to our employees based on their skills, experience, and performance.

CPRA (California Candidates): When you submit your application, OpenSesame may collect and use your personal information in accordance with our privacy policy and the CPRA. This may include personal details and employment history, and will only be used for employment-related purposes. We may share this information with third-party service providers, but we will not sell it to third parties. If you have any questions or concerns, please contact us, and for more information on your rights under the CPRA, refer to our privacy policy or the California Attorney General's website.</div>

Senior Security Analyst, Compliance

Search 10000+ Cloud security analyst jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 cloud security analyst jobs Near Me

Junior Cloud Security Analyst

Data Security & DLP Analyst

DoW Junior Cloud RMF Analyst

DoW Junior Cloud RMF Analyst

AI / Emerging Tech Security Analyst

Cloud Security Engineer

Senior Security Analyst, Compliance