Lead Cloud Security Analyst

Tyto Athene is searching for an experienced Lead Cloud Security Analyst to lead a team implementing a cloud security posture management (CSPM) program in a federal multi-cloud environment.

Responsibilities:

• Design, document, implement, and manage security control integration with cloud environments to protect sensitive OCC data and systems in the cloud
• Build CSPM capabilities to continuously monitor cloud environments for misconfigurations, vulnerabilities, responding to and mitigating security threats, and identifying non-compliance with OCC’s NIST 800-53 based security standards
• Support, extend, and enforce Identity, Credential, and Access Management (ICAM) practices and associated tools for cloud-based services and platforms
• Perform security risk assessments, reviews, and recommendations for new and existing cloud applications and services
• Collaborate with other engineering and application development teams to integrate Zero Trust Architecture (ZTA) security principles into the software development lifecycle (SDLC)
• Support and enhance government's current Security Orchestration, Automation and Response (SOAR) practices and associated tools to leverage cloud-based capabilities that have not yet been utilized for Splunk as well as AWS and Azure security services
• Represent cyber security team on internal working groups and providing subject matter expertise on cloud security engineering best practices
• Develop scripts or code to automate operations, administration, maintenance, or analysis of data and systems
• Develop, document, and review secure baseline configurations for each technology used within the environment
• Design, develop, and maintain detailed security drawings
• Conduct gap analysis of system requirements and components

Required:

• US Citizenship, Public Trust Eligibility required
• Minimum 8 years of general experience and 6 years of Cloud Security Engineering experience
• Bachelor's degree in a technical field from an accredited college/university or equivalent experience
• Experience utilizing and configuring security services within Azure and/or AWS environments such as SecurityHub, Purview, InTune and Defender
• Experience automating the remediation of configuration flaws in cloud environments
• Experience creating custom API integrations
• Strong analytical and organizational skills
• Ability to communicate complex concepts efficiently and accurately
• Familiarity with implementing DISA STIGs and CIS Benchmarks preferred
• Thorough understanding and knowledge of networking in a hybrid cloud and Zero Trust environment

Desired:

<