Cloud Security Analyst

About this Opportunity:

As a Cloud Security Analyst, you willensure the adherence of security best practices to Orions multiple cloud platforms and validates the confidentiality, integrity, and availability of the data within those environments. The Cloud Security Analyst will contribute to the development and implementation of internal cloud security requirements and provide guidance to technical teams around these developed security requirements. The Cloud Security Analyst monitors and assesses the information security controls around Orions Cloud systems and works with technical teams to remediate any security vulnerabilities identified in a timely manner. As we continue to evolve and live our Orion values, we are looking for someone to grow with us.

For External Candidates:
Candidates must work in-office at one of the following locations for at least 3 days per week: Omaha, NE; Sacramento, CA; Hebron, KY; Chandler, AZ; Lehi, UT.

For Internal Candidates:
All internal employees, regardless of their current work arrangement (remote or in-office), are encouraged to apply.

In this role, youll get to:

• Continually review and assess Orions multi-cloud environment for potential vulnerabilities. Evaluate risk, document findings, and make recommendations for remediation efforts

• Assist with third-party application security assessments, document findings and coordinate remediation efforts where needed

• Ensure adherence to Orions Information Security Management System (ISMS)

• Assess Orions multi-cloud infrastructure for adherence to security compliance standards

• Respond to and escalate potential security incidents

• Work closely with the DevOps, Platform, and InfoSec teams for various security tasks and initiatives

Were looking for talent who:

• Has a minimum of a bachelors degree in MIS, Computer Science, Network Technology, Cybersecurity, Application Development, Cloud Computing

• Possess two or more Industry certifications, or the ability to obtain within 12 months: ISC2 , CompTIA , GIAC , AWS , Azure

• Possess a minimum of 5 years of experience in Information Technology, Cybersecurity, Application Development, or related field

• Possess a minimum 1 year of experience with DevOps and Cloud security

• Obtain Orion Industry Certification

• Owns and manages relationships with stakeholders directly and work effectively with people at all levels in an organization

• Has working knowledge of threat modeling, OWASP, and software testing practices

• Has ands-on experience with infrastructure as code (IaC)

• Has extensive experience in AWS to include EC2, S3, ECS, ECR, VPC, ELB, SCPs and IAM

• Has sound understanding of cloud security vulnerabilities, defense techniques and security best practices, including AWS-specific security practices and present-day threats.

• Has knowledge of cybersecurity frameworks: ISO, NIST, SOC2.

• Has experience with cloud security platforms: Wiz, Orca, Prisma Cloud or similar

• Has knowledge of web development frameworks

• Has strong technical writing skills to articulate security vulnerabilities to technical and nontechnical teams

• Stays abreast of emerging trends and new cloud technologies

• Multi-tasks while maintaining careful attention to detail

• Works effectively both individually and within a team environment

• Works with a sense of urgency to meet deadlines and address competing priorities

#LI-AP1

#LI-Onsite

#LI-Hybrid

Salary Range:

The pay listed in this posting indicates the estimated pay at the time of this posting; however, may vary depending on geographic location, job-related knowledge, skills, and experience. In addition, Orion offers a competitive benefits package which includes health, dental, vision, and disability coverage on day one, 401(k) plan with employer match, paid parentalleave, pet benefits including pawternity leave and pet insurance, student loan repayment and more.

About Us

At Orion, we achieve our best work when we support one another, staying personally accountable to each other and the clients we serve. We create a welcoming environment where everyone is respected, valued, and heard. Our commitment to create raving fans ensures we consistently exceed client expectations. Thinking differently is in our DNAwe innovate always, push boundaries, and reject the status quo to deliver transformative outcomes. Together, we support one another and see it through to success, driving our collective achievements and those of our clients.