Cloud Security Analyst

BI WORLDWIDE; Edina (MN); Híbrido; USD 120.000 - 150.000; Jornada completa

Descripción de la vacante

BI WORLDWIDE is seeking a Cloud Security Analyst to configure, monitor, and protect cloud SaaS platforms (Salesforce, ServiceNow, Microsoft 365, etc.). You will own data security settings, tune detections, and drive threat remediation across multiple SaaS environments with collaboration across platform owners.

You will triage alerts, automate repeatable tasks, and contribute to security incident response and compliance activities.

Formación

• Experience in information security, security operations, cloud security, IAM, systems administration, or related technical discipline.
• Hands-on experience securing at least one major SaaS platform, such as Salesforce, ServiceNow, or Microsoft 365.
• Understanding of core security concepts including least privilege, identity federation, MFA, encryption, data classification, and logging.
• Ability to read and interpret audit logs, sign-in events, security alerts, and technical documentation.
• Familiarity with scripting or query languages and the ability to automate repeatable security tasks.

Responsabilidades

• Own data security across cloud SaaS platforms and partner with platform owners to implement best practices.
• Configure, harden, and maintain data security settings across cloud SaaS platforms and other business applications.
• Manage and review identity and access controls (SSO, MFA, conditional access, roles, sharing, privileged accounts).
• Implement and maintain data protection controls (DLP, sensitivity labels, encryption, field-level security, external sharing policies).
• Build, tune, and maintain monitoring, logging, and event detection for SaaS environments with SIEM integration.
• Triage and investigate security alerts and suspicious activity through resolution.
• Proactively hunt for threats using SSPM, CASB, and native security consoles.
• Lead remediation of threats and coordinate with owners and IT teams to closure.
• Participate in security incident response for SaaS events (containment, evidence collection, root-cause analysis).
• Identify repetitive manual work and create scripts, detections, dashboards, playbooks to reduce effort.
• Create and maintain security baselines, runbooks, and procedures for knowledge continuity.
• Support access reviews, audits, and compliance activities (SOC 2, ISO 27001, privacy requirements).
• Review new SaaS apps and changes for security risk and advise on secure implementation.
• Learn additional SaaS platforms as needs evolve.

Conocimientos

Information security

Security operations

Cloud security

Identity and access management

Systems administration

Scripting languages

Herramientas

PowerShell

Python

KQL

SOQL

Descripción del empleo

Our Information Security & Compliance team is seeking interest for a Cloud Secuity Analyst. We are looking for a technically curious, detail-oriented security professional to help configure, monitor, and protect the cloud SaaS platforms our business runs on, including Salesforce, ServiceNow, Microsoft 365, and others. This person will own data security settings, build and tune monitoring and event detection, and lead the discovery and remediation of threats across some SaaS environments, while partnering with existing owners across other SaaS environments.

We work a hybrid model (3 days in the office and 2 days work from home); this position is located in our Minneapolis Metro headquarters.

This role is intentionally broad enough to cover multiple SaaS platforms over time. We are not looking for someone who is already an expert in every application we use. The right person has a solid security foundation, is comfortable learning unfamiliar platforms, and can become increasingly self-sufficient as they gain knowledge of our applications and environment.

Responsibilities

• Directly own data security across some cloud SaaS platforms and partner with other platform owners to ensure current best practices are implemented to secure each platform individually while collectively securing the entire corporate platform umbrella.
• Configure, harden, and maintain data security settings across cloud SaaS platforms and other business applications.
• Manage and review identity and access controls, including SSO, MFA, conditional access, role and permission models, sharing settings, and privileged accounts.
• Implement and maintain data protection controls such as data loss prevention (DLP), sensitivity labels, encryption settings, field-level security, and external sharing policies.
• Build, tune, and maintain monitoring, logging, and event detection for SaaS environments, including audit log collection, alert rules, and integration with SIEM and security tooling.
• Triage and investigate security alerts and suspicious activity, such as anomalous logins, data exfiltration, risky OAuth or third-party app connections, and unauthorized configuration changes.
• Proactively hunt for threats, misconfigurations, and posture drift using SaaS Security Posture Management (SSPM), CASB, native security consoles, and other tools.
• Lead remediation of identified threats and vulnerabilities, coordinating with platform owners, administrators, and IT teams to drive issues through to closure.
• Participate in security incident response for SaaS-related events, including containment, evidence collection, root-cause analysis, and post-incident follow-up.
• Identify repetitive manual work and create or improve scripts, automated detections, dashboards, playbooks, and workflows that reduce operational effort.
• Create and maintain security baselines, configuration standards, runbooks, and procedures, so knowledge is not concentrated with a single person.
• Support access reviews, audits, and compliance activities (such as SOC 2, ISO 27001, and privacy requirements) for assigned SaaS platforms.
• Review new SaaS applications, integrations, and significant configuration changes for security risk, and advise on secure implementation.
• Learn additional SaaS platforms over time as organizational needs change and applications are introduced, modernized, replaced, or retired.

Role Scope

The primary focus of this role is hands-on security configuration, monitoring, and threat response for cloud SaaS environments. The Cloud Security Analyst will be expected to independently resolve routine and moderately complex security issues, perform meaningful investigation before escalating, and steadily expand the set of platforms they can secure.

Supported platforms may include Salesforce, ServiceNow, Microsoft 365, collaboration and file-sharing tools, and other SaaS applications assigned to the team.

Deeper security architecture, infrastructure, and application engineering work will continue to be handled in partnership with the appropriate subject-matter experts and platform owners. The goal of this role is not to replace those specialties, but to provide strong first-line security ownership of our SaaS footprint, so senior resources are engaged when their expertise is needed.

What We Are Looking For

A strong security foundation

• Experience in information security, security operations, cloud security, identity and access management, systems administration, or a related technical discipline.
• Hands-on experience administering or securing at least one major SaaS platform, such as Salesforce, ServiceNow, or Microsoft 365.
• Understanding of core security concepts, including least privilege, identity federation (SAML, OAuth, OIDC), MFA, encryption, data classification, and logging.
• Ability to read and interpret audit logs, sign-in events, security alerts, and technical documentation.
• Strong troubleshooting and analytical problem-solving skills, including the ability to work through unfamiliar security problems methodically.
• Familiarity with scripting or query languages (such as PowerShell, Python, KQL, or SOQL) and the ability to automate repeatable security tasks.

Detection and response

• Experience with triaging security alerts and investigating suspicious activity through to resolution.
• Ability to distinguish between a routine security event and an incident that requires escalation or broader response.
• A mindset of ownership: investigate before escalating, document what was learned, and look for ways to prevent recurring issues.

Continuous improvement

• Looks for opportunities to strengthen security posture through automation, better detections, tooling, documentation, or process improvements.
• Able to make practical security improvements that balance risk reduction with business usability, without over-engineering the solution.
• Interested in improving supportability and reducing dependence on tribal knowledge or a single subject-matter expert.

Communication and collaboration

• Able to explain security risks and recommendations clearly to both technical and non-technical audiences.
• Able to document security standards, procedures, and investigation steps in a way others can follow.
• Comfortable collaborating across IT, application administration, infrastructure, compliance, legal, and business teams.

Preferred Experience

Experience with one or more of the following is beneficial, but experience across all areas is not required:

• Microsoft security stack: Entra ID, Defender for Cloud Apps, Defender XDR, Purview (DLP, sensitivity labels, Insider Risk), and Sentinel.
• Salesforce Shield (Event Monitoring, Platform Encryption, Field Audit Trail) and Salesforce security configuration.
• ServiceNow security administration, access control lists (ACLs), and instance hardening.
• SaaS Security Posture Management (SSPM) or Cloud Access Security Broker (CASB) tools.
• SIEM or SOAR platforms, log ingestion, and detection engineering.
• Identity platforms such as Okta or Entra ID, including SSO and lifecycle management.
• Security frameworks and benchmarks such as NIST CSF, CIS Benchmarks, MITRE ATT&CK, SOC 2, or ISO 27001.
• Security certifications such as Security+, CySA+, CCSP, Microsoft SC-200 / SC-300 / SC-401, or Salesforce Security and Administrator credentials.

Base Salary Range: $120,000 to $150,000. The final salary and offer will be determined by the applicant's background, experience, and skills.

More details about our company benefits can be found at the following link: https://www.biworldwide.com/careers/benefits-page/