Cloud Security Analyst

Security 1st Consulting; Newport News (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

Security 1st Consulting seeks a Cloud Security Analyst to assess NNPS cloud environments (Google Workspace, Microsoft 365 and cloud platforms). You will test APIs, evaluate IAM, logging, and storage security, and deliver actionable findings for NNPS IT staff with minimal cloud security background.

The role requires active cloud security certifications and 3+ years in cloud security assessment, with experience across Google Workspace, AWS, Azure, and GCP environments.

Qualifications

• Active cloud security certifications (AWS/Azure/GCP)
• 3+ years of cloud security assessment experience
• Proficiency with cloud-native security tools and cloud security platforms
• Experience assessing IAM configurations, storage security and API security
• Strong findings documentation skills

Responsibilities

• Conduct cloud environment security assessment across NNPS platforms (Google Workspace, Microsoft 365, AWS/Azure/GCP)
• Perform API security testing to identify authentication weaknesses and access control gaps
• Assess cloud configuration against CIS Benchmarks and NIST 800-53 controls for cloud environments
• Evaluate IAM policies, logging configurations, and network segmentation within cloud environments
• Test cloud storage security: misconfigured access, unencrypted data, policy gaps
• Assess third-party SaaS integrations for insecure data sharing or access control weaknesses
• Obtain written authorization from NNPS IT team before testing begins
• Produce a cloud-specific findings report prioritized by risk and remediation ease

Skills

Cloud security assessment

IAM configurations

Security documentation

Communication

Job description

The Cloud Security Analyst assesses NNPS cloud environment security across platforms such as Google Workspace, Microsoft 365, and any other cloud-hosted applications in use. You will evaluate configuration, access controls, API security, and data exposure risks - and produce a findings report that NNPS IT staff can act on without needing a cloud security background to interpret.

Responsibilities

• Conduct cloud environment security assessment across NNPS-utilized platforms including Google Workspace, Microsoft 365, and any applicable AWS, Azure, or GCP environments.
• Perform API security testing to identify authentication weaknesses, access control gaps, and data exposure risks.
• Assess cloud configuration against CIS Benchmarks and applicable NIST 800-53 controls for cloud environments.
• Evaluate IAM policies, logging configurations, and network segmentation within cloud environments.
• Test cloud storage security - identifying misconfigured access permissions, unencrypted data, and policy gaps.
• Assess third-party SaaS integrations for insecure data sharing or access control weaknesses.
• Obtain written authorization from NNPS IT team for all cloud environment access before testing begins.
• Produce a cloud-specific findings report with findings prioritized by risk and ease of remediation.

Requirements

REQUIRED QUALIFICATIONS

• Active cloud security certification - AWS Certified Security Specialty, Azure Security Engineer (AZ-500), or GCP Professional Cloud Security Engineer.
• 3 or more years of cloud security assessment experience.
• Proficiency with cloud-native security tools and third-party cloud security platforms.
• Experience assessing IAM configurations, storage security, and API security in cloud environments.
• Strong findings documentation skills.

PREFERRED QUALIFICATIONS

• CCSP (Certified Cloud Security Professional) certification.
• Experience assessing Google Workspace security specifically - common in K-12 environments.
• Familiarity with NIST 800-53 cloud control applicability guidance.
• Prior cloud security work in education or government environments