Sr. Cloud Infrastructure Vulnerability Analyst

Role : Cloud Security Analyst

Location: Dallas, TX - Hybrid role

Synonyms- Cloud Infrastructure vulnerability Analyst

Overview: 

• Blue Yonder is a Leading AI-driven Global Supply Chain Solutions Software Product Company and one of Glassdoor’s “Best Places to Work”  
• Seeking an Sr. Cloud Infrastructure Vulnerability Analyst who would be responsible for Cloud Security Posture Management (CSPM), identifying security vulnerabilities including misconfigurations across cloud infrastructures, including Infrastructure as a Service (IaaS), Software as a Service (Saas), and Platform as a Service (PaaS).  
• This candidate would also be responsible for Cloud Workload Protection (CWP), to provide continuous discovery and monitoring of vulnerabilities in the workloads deployed in the cloud infrastructure.
• Candidate will be directly responsible for vulnerability management and threat management of the overall infrastructure and information assets.

Scope: 

• Core responsibilities to include assessing and promoting remediation for all the assets in the Infrastructure as a Service (IaaS) and Software as a Service (Saas).
• Candidate will be a key member of the centralized information security team.

What you’ll do: 

• Discover and continuously monitor for vulnerabilities in the public cloud infrastructure, cloud workloads including dockers, Kubernetes, and containers, etc.
• Create golden images for virtual machines, dockers and containers to be spun up for the business.
• Identify gaps in Identity and Management (IAM) in Public Cloud.
• Perform vulnerability scans and report findings for On-prem and Cloud networks.
• Publish the vulnerability status reports to senior management and track remediation.
• Define and participate in implementation of On-prem and Cloud architecture and security controls.
• Proactive identification of threats and risk remediation.
• Discover the assets in the cloud infrastructure to identify and continuously monitoring for security vulnerabilities and misconfigurations.
• Maintain security by monitoring and ensuring compliance to standards, policies, and procedures; conducting incident response analyses; developing and conducting training programs.
• Upgrade security systems by monitoring security environment; identifying security gaps; evaluating and implementing enhancements.
• Participate in and assist with incident response team, as appropriate.
• Generate metrics for the Management as needed.
• Prepare system security reports by collecting, analyzing, and summarizing data and trends.

What we are looking for:  

• 6-8 years of proven experience in Information security or Vulnerability Management and atleast 4 years of experience in Cloud security; a Master’s degree can be substituted for experience. 
• Extensive experience in public cloud infrastructure such as Microsoft Azure, Google GCP, or AWS.
• Proven experience in Cloud Security Posture Management tools like Microsoft Defender, Wiz, Tenable, Aqua Security, Prisma Cloud, Lacework, Scribe Security, etc.
• Certifications such as CCSK, CCSP, GCSA, Microsoft Certified Azure Security Engineer Associate, CISSP or equivalent. 
• Strong expertise in Vulnerability and Threat Management, gathering and condensing threat intelligence into actionable and meaningful communication materials. 
• Thorough understanding of Identity and Access Management best practices in Public cloud.
• Bachelor’s degree in information security or Information Technology or Computer Science or related fields or from STEM
• Deep and diverse experience architecting and implementing network security designs. Expert in network security, system security and endpoint security. 
• Through understanding of security vulnerabilities and misconfigurations in the cloud infrastructure.
• Thorough understanding of native cloud solutions like dockers, containers, Kubernetes, VDIs, cloud storage, cloud infrastructure, etc.
• Familiarity with security frameworks and regulatory requirements such as NIST, ISO 27001/2, and SSAE-18. 
• Proven experience with products dealing with vulnerability management services which include Qualys, Nessus, Nexpose, etc. 
• Practical experience with the development, implementation, and management of security related technologies (i.e., SIEM, WAF, AV, Firewalls, Internet-facing services). 
• Excellent customer service including strong written and oral communication skills. 
• Knowledge of security network devices (firewalls, switches, SIEM, Antivirus, cryptography, etc.) and other security networking hardware/software tools. 
• Demonstrated understanding of i