Cloud Security Analyst

Direct Client Requirement
Role: Cloud Security Analyst
Location: India Remote potential to work in the office in the future (Hyderabad)
Type: Full Time/Permanent
Work hours: 2-11 pm India hours

Summary of Position

Essential Duties and Responsibilities

• Monitor and analyze security alerts generated by Microsoft Sentinel, Wiz, AWS GuardDuty, AWS Security Hub, and Azure Defender for Cloud to identify potential security threats and vulnerabilities.
• Conduct incident investigation and response for cloud security events in AWS and Azure environments, coordinating with cloud engineering, DevOps, and operations teams.
• Develop and tune detection rules and analytics queries in Microsoft Sentinel using KQL to identify cloud-specific threats and attack patterns.
• Utilize Wiz platform for cloud security posture management, vulnerability assessment, and configuration analysis across AWS and Azure.
• Perform security assessments of AWS and Azure resources including EC2 instances, S3 buckets, Azure Storage, IAM policies, network configurations, and security groups.
• Analyze CloudTrail logs, VPC Flow Logs, Azure Activity Logs, and other cloud telemetry to identify suspicious activities and security incidents.
• Monitor and investigate identity and access management (IAM) security events including privilege escalation, unusual access patterns, and policy violations.
• Create and maintain security dashboards, metrics, and reports using AWS QuickSight, Azure Workbooks, Power BI, or similar tools.

Qualifications Expected for Position

• 3+ years of experience in information security with focus on security operations, incident response, or cloud security.
• 2+ years hands-on experience with Wiz Platfrom, AWS security services (GuardDuty, Security Hub, CloudTrail, Config, IAM).
• 2+ years hands-on experience with Azure security services (Defender for Cloud, Microsoft Sentinel, Azure Monitor, Microsoft Entra ID).
• Strong understanding of cloud security principles and practical experience with AWS and Azure platforms.
• Experience analyzing security logs, alerts, and telemetry from cloud environments.

Preferred Qualifications

• Experience with Wiz security graph, vulnerability prioritization, and cloud inventory management.
• Hands-on experience with AWS security services including GuardDuty, Detective, Config Rules, and Systems Manager.
• Experience with Azure security services including Policy, Blueprints, Key Vault, Defender for Cloud, Application Gateway WAF, and Network Security Groups.
• Proficiency with KQL (Kusto Query Language) for threat detection and investigation in Microsoft Sentinel.
• Understanding of cloud identity threats and attack patterns (AWS IAM, Azure AD/Entra ID, privilege escalation, lateral movement).
• Experience with MITRE Telecommunication&CK framework and mapping cloud threats to tactics, techniques, and procedures.
• Knowledge of container security monitoring (ECS, EKS, AKS, Azure Container Instances).
• Familiarity with serverless security (AWS Lambda, Azure Functions) and API security.
• Understanding of cloud network security including VPCs, subnets, security groups, NACLs, NSGs, and virtual networks.
• Proficiency with scripting for automation and analysis (Python, PowerShell, Bash).
• Experience with Infrastructure as Code security scanning (Terraform, CloudFormation, ARM Templates, Bicep).
• Understanding of AWS Organizations, Service Control Policies (SCPs), and Azure Management Groups for security governance.
• Relevant certifications such as AWS Certified Security Specialty, Azure Security Engineer Associate, Microsoft Certified: Security Operations Analyst Associate, CompTIA Security+, or GIAC Cloud Security Automation (GCSA).
• Wiz certification or demonstrated expertise with the platform.