Cloud Security Analyst

Dale Workforce Solutions; Philadelphia (Philadelphia County); On-site; USD 90,000 - 125,000; Full time

Job summary

Dale Workforce Solutions is seeking an Information Security Analyst to serve as a SME for business areas and technical teams, strengthening our security posture across on-prem and cloud environments (Azure, AWS, GCP). You will evaluate, test, document, and operationalize security controls while enabling the business to innovate securely.

Responsibilities include acting as the customer interface for Information Security Operations, engaging stakeholders, and ensuring alignment with HITRUST, PCI,

Qualifications

• 5–8 years in information security or 3–5 years in IT with strong security responsibilities.
• Expertise in incident response, system monitoring/analysis, and risk assessments aligned with compliance and privacy laws.
• Knowledge with compliance requirements: HITRUST, PCI, NIST, HIPAA, SOC2.
• Knowledge across multiple platforms: Windows, Linux/Unix, macOS; networks and endpoints.
• Experience with vulnerability assessment and penetration testing engagements.
• Experience with change management and project management.
• Excellent technical writing and presentation skills; ability to translate technical risk to business impact.

Responsibilities

• Serve as SME for Cloud & Enterprise Security (SME) across the org.
• Act as the customer interface for Information Security Operations.
• Evaluate, test, document, and operationalize security solutions and controls.
• Collaborate across on-premises and cloud environments (Azure, AWS, GCP).
• Engage stakeholders and communicate risk and controls effectively.

Skills

InfoSec expertise

Incident response

Risk assessment

Security monitoring

GRC knowledge

Cloud security

Technical writing

Communication

Tools

Azure Defender

Microsoft Sentinel

MDE

Elastic SIEM

Qualys

NexusIQ

Job description

We are seeking a passionate, adaptable Information Security Analyst who will serve as a subject matter expert (SME) for business areas and technical teams, and act as the customer interface for the Information Security Operations function. You will strengthen our security posture by evaluating, testing, documenting, and operationalizing security solutions and controls across on premises and cloud environments (Azure, AWS, GCP)—while enabling the business to innovate securely.

Key Responsibilities

• Cloud & Enterprise Security (SME)
• Governance, Risk & Compliance (GRC)
• Stakeholder Engagement & Communication

Technical Expertise

Cloud Security (Azure, AWS, GCP)

• Azure: Defender for Cloud, Microsoft Sentinel, Entra ID (Azure AD), Conditional Access, Key Vault, NSGs/Azure Firewall, storage encryption, Defender for Endpoint integration.
• AWS: IAM roles/policies, Security Hub, GuardDuty, KMS, CloudTrail/CloudWatch, VPC security controls, AWS WAF, Secrets Manager.
• GCP: IAM, Security Command Center, Cloud Audit Logs, VPC Service Controls, CMEK/KMS, Cloud Armor, Workload Identity; container security (GKE).

Additional Technologies

• Operating Systems: Linux, Windows Server, Windows Desktop; hardening, patching, CIS Benchmarks.
• Network & Perimeter: Palo Alto firewalls, URL filtering, DNS blackhole/geo filtering, WildFire; F5 AWAF.
• SIEM & Logging: MS Sentinel, MDE, Elastic; Endpoint management/log forwarding. Microsoft Data Lake, CRIBL
• Vulnerability & AppSec: Qualys, NexusIQ; OWASP aligned testing and remediation.
• Endpoint: Microsoft Defender, Microsoft ATP/Defender for Endpoint.
• Identity & MFA: Okta, Microsoft (Entra ID MFA).

Requirements

• 5–8 years of relevant information security experience (or 3–5 years in IT systems administration with strong security responsibilities).
• Expertise in incident response, system monitoring/analysis, and risk assessments aligned with compliance and privacy laws.
• Knowledge with compliance requirements: HITRUST, PCI, NIST, HIPAA, SOC2.
• Knowledge across multiple platforms: Windows, Linux/Unix, macOS; networks and endpoints.
• Experience with vulnerability assessment and penetration testing engagements.
• Experience with change management and project management.
• Excellent technical writing and presentation skills; ability to translate technical risk to business impact.

Preferred

• CCSP preferred; other certs: AZ 500, AWS Security Specialty, GCP Professional Cloud Security Engineer.
• Experience securing Azure, AWS, GCP in enterprise/hybrid environments.
• Familiarity with NIST CSF, ISO 27001, CIS Benchmarks, MITRE Telecommunication&CK.