Cloud Security Analyst: Multi-Cloud & IR (Contract)

ZealHire Inc.; Philadelphia (Philadelphia County); On-site; USD 90,000 - 130,000; Full time

Job summary

ZealHire Inc. is seeking an Information Security Analyst to lead cloud security efforts across Azure, AWS, GCP, and on-prem environments in a primarily on-site role in Philadelphia.

You will act as SME for security operations, incident response, and risk assessments, partnering with audit and tech teams to strengthen controls. You will evaluate security solutions, document requirements, and operationalize controls while enabling secure business innovation.

Qualifications

• 5–8 years of relevant information security experience (or 3–5 years in IT systems administration with strong security responsibilities).
• Expertise in incident response, system monitoring/analysis, and risk assessments aligned with compliance and privacy laws.
• Knowledge with compliance requirements: HITRUST, PCI, NIST, HIPAA, SOC2.
• Knowledge across multiple platforms: Windows, Linux/Unix, macOS; networks and endpoints.
• Experience with vulnerability assessment and penetration testing engagements.
• Experience with change management and project management.
• Excellent technical writing and presentation skills; ability to translate technical risk to business impact.

Responsibilities

• Serve as SME for security across Azure, AWS, GCP, and on prem environments.
• Guide cloud security architecture: IAM, encryption/key management, network controls, data protection, workload hardening.
• Implement process improvements aligned to security frameworks (NIST CSF/800 53, ISO 27001) and business needs; optimize technology to improve customer experience.
• Implement and monitor controls for unusual and suspicious activity across endpoints, networks, and cloud platforms.
• Perform advanced monitoring, data/log analysis, threat hunting, and forensic investigations; contribute to SOC/IR workflows.
• Plan, contribute to, and participate in incident plan exercises and tabletop scenarios.
• Draft or revise local policies, standards, guidelines, and procedures to supplement enterprise frameworks; identify and remediate gaps based upon NIST standards.
• Interface with internal/external auditors and examiners; maintain vendor management standards, questionnaires, and regulatory documentation (HITRUST, PCI, NIST, HIPAA, SOC2).
• Review contracts and provide security guidance; support project scoping, costing, and cost–benefit analyses.
• Act as a liaison for the security team; clearly communicate business risk as it relates to information security.
• Create technical documentation (reports, white papers, technical notes, implementation/configuration guides).
• Use visual aids to convey complex topics to large, diverse audiences; communicate clearly in high pressure, high visibility situations.
• Recommend new security solutions and improvements that do not impede innovation.
• Stay current with the evolving threat landscape; consistently learn and grow to remain a step ahead of attackers.

Skills

GCP

Cloud security

Incident response

Monitoring & logging

Risk assessment

Compliance knowledge

Education

CCSP or equivalent certification

Tools

Proofpoint

Defender

SCC Command Center

CSPM tooling

M365 Defender

Job description

ZealHire Inc. is seeking an Information Security Analyst to lead cloud security efforts across Azure, AWS, GCP, and on-prem environments in a primarily on-site role in Philadelphia.

You will act as SME for security operations, incident response, and risk assessments, partnering with audit and tech teams to strengthen controls. You will evaluate security solutions, document requirements, and operationalize controls while enabling secure business innovation.