Principal Cloud Security Analyst

What You Need To Know

 

Open the door to a groundbreaking tech career with an industry leader. Southern Glazer’s Wine & Spirits is North America’s preeminent wine and spirits distributor, as well as a family-owned, privately held company with a 50+ year legacy of success. To create a new era in alcohol beverage sales and service, we’re heavily invested in the most transformative new technologies – and the most brilliant tech professionals. Southern Glazer’s was named by Newsweek as a Most Loved Workplace and is included on the Forbes lists for Largest Private Companies and Best Employers for Diversity.

 

As a full-time employee, you can choose from a full menu of our Top Shelf Benefits, including comprehensive medical and prescription drug coverage, dental and vision plans, tax-saving Flexible Spending Accounts, disability coverage, life insurance plans, and a 401(k) plan. We also offer tuition reimbursement, a wellness program, parental leave, vacation accrual, paid sick leave, and more.

 

We offer continuous learning and career growth in a fast-paced environment where you are respected, your voice is heard, and technology is part of our strategy for success. If you’re looking to fill your glass with opportunity, come join our FAMILY.

Overview

 

The Principal Cloud Security Analyst role is responsible for ensuring the security and improvement of the cloud infrastructure, applications, and data. This role will continuously monitor changes to existing cloud infrastructure to ensure the confidentiality, integrity, and availability of cloud resources while identifying vulnerabilities and mitigating risk. This role will work closely with cross-functional teams to embed security into cloud projects and address security challenges. 

Specialized Skills and Technologies

 

• Experience with Azure, AWS and GCP
• Solid knowledge of current and emerging technologies
• Proficient in monitoring tools, access control and threat detection 
• Willingness to mentor, train, and share knowledge with peers
• Deep understanding of security frameworks such as NIST, ISO 27001, etc.
• An understanding of practices integrating security into the continuous integration and continuous deployment (CI/CD) pipeline. 
• Knowledge of containerization technologies, such as Dockers and/or Kubernetes, and how to secure applications within those environments
• Able to perform incident response within cloud platforms
• Ability and desire to lead combined with the flexibility to share the duties of the technical team

Primary Responsibilities

 

• Conducts assessments of all major cloud environments to identify vulnerabilities and security risks
• Makes recommendations on where improvements can be made to continue strengthening our security posture
• Works with outside teams to develop cloud-specific security policies, procedures, and standards
• Responsible for monitoring and responding to security events related to cloud environments
• Implement a lessons-learned process for continuous improvement related to cloud-related incidents
• Works with outside teams to assess third-party cloud service providers to ensure alignment with our security standards
• Collaborates with cross-functional teams to integrate security into the CI/CD pipeline and ensure continuous security throughout the software development lifecycle
• Utilize a Cloud Security Posture Management (CSPM) solution to monitor and manage the configuration of infrastructure-as-code (IaC) frameworks, ensuring strict adherence to established security standards and policies
• Regularly review CSPM findings to identify and address security vulnerabilities proactively
• Produces and maintains documentation of all cloud-related security controls
• Analyzes activities and documented resolutions 
• Identifies problem areas, devise, and deliver solutions to enhance quality of service and prevent future issues
• Defines key operational metrics, develops reporting, and set targets to continuously improve
• Participates in Information Security projects and supports team efforts for day-to-day operations
• Remains current on cloud-security trends while integrating best practices into our security strategy
• Aggressively automates repeated tasks to allow the team to scale with the organization’s growth
• Communicates and acts as liaison with a variety of teams
• Serves as a subject matter expert inside of SGWS and assists with complex issues pertaining to cloud security as needed
• Occasional after-hours participation may be required in the event of emergencies or critical situations

Preferred Qualifications

 

• Master’s Deg